Ivanti Endpoint Manager vulnerabilities
73 published CVEs name Ivanti Endpoint Manager among the affected products; CISA lists 4 of them as exploited in the wild.
- 73Published CVEs73 of them scored
- 14Last 12 monthspublished in the last year
- 9Critical42 more rated high
- 4Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-1603
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.
Ivanti · Endpoint Manager
ExploitedHigh8.6 - CVE-2024-13159
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8 - CVE-2024-13160
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8 - CVE-2024-13161
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8