VDB
CNVD-2026-02918
CNVD-2026-02918
PUBLISHED
CVSS 10 CRITICAL
Ivanti EPMM是一款企业级的移动设备管理（MDM）解决方案，旨在帮助组织集中管理和保护员工使用的移动设备。 Ivanti EPMM存在身份验证绕过漏洞，该漏洞源于程序存在不当的身份验证，攻击者可利用该漏洞在未经正确身份验证的情况下访问应用程序的受限功能或资源。
Risk Scores
CVSS 3.0
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | EPMM | 11.10 |
Timeline
- Jul 26, 2023 CVE Published
- Jan 18, 2024 PoC Published
- Jan 22, 2024 PoC Published
- Oct 26, 2024 PoC Published
- Oct 27, 2024 PoC Published
- Oct 30, 2024 PoC Published
- Oct 31, 2024 PoC Published
- Nov 1, 2024 PoC Published
- Nov 2, 2024 PoC Published
- Nov 5, 2024 PoC Published
- Nov 7, 2024 PoC Published
- Nov 9, 2024 PoC Published