GCVE-VVD-NCSC-2024-369

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published September 11, 2024

Ivanti heeft kwetsbaarheden verholpen in Ivanti Endpoint Manager.

Weaknesses (CWE)

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-306Missing Authentication for Critical FunctionCWE-1390Weak AuthenticationCWE-427Uncontrolled Search Path ElementCWE-502Deserialization of Untrusted DataCWE-611Improper Restriction of XML External Entity Reference

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
ivanti	endpoint_manager	—	—

Aliases

CVE-2024-32845 CVE-2024-32846 CVE-2024-8321 CVE-2024-37397 CVE-2024-29847 CVE-2024-34785 CVE-2024-8320 CVE-2024-8322 CVE-2024-8191 CVE-2024-32848 CVE-2024-32843 CVE-2024-32842 CVE-2024-34779 CVE-2024-8441 CVE-2024-34783 CVE-2024-32840

Transitive aliases

EUVD-2024-26839 CVE-2024-13160 GHSA-98mp-xvw5-2fch BDU:2025-00402 EUVD-2024-49005 EUVD-2024-51395 CVE-2024-13162 VVD-CISA-2024-34779 VVD-CISA-2024-8321 VVD-CISA-2024-34785 BDU:2024-07734 VVD-CISA-2024-8322 CVE-2024-13172 EUVD-2024-51385 GHSA-42p2-q66q-8hx8 VVD-CISA-2024-37397 CVE-2024-13169 CVE-2024-13158 VVD-CISA-2024-10811 EUVD-2024-33593 GHSA-vh7p-jh36-p55r BDU:2025-00406 EUVD-2024-36633 VVD-CISA-2024-8191 BDU:2025-00408 NCSC-2024-0369 BDU:2024-07155 VVD-CISA-2024-8441 VVD-CISA-2024-32845 VVD-CISA-2024-13167 EUVD-2024-30631 CNVD-2025-30742 EUVD-2024-51388 VVD-CISA-2024-13171 EUVD-2024-49090 VVD-CISA-2024-13162 EUVD-2024-51393 BDU:2024-07158 VVD-CISA-2024-32840 EUVD-2024-49178 BDU:2024-07266 EUVD-2024-35051 VVD-CISA-2024-13168 VVD-CISA-2024-13166 CNVD-2024-38821 GHSA-pcxj-w6pv-x9c5 BDU:2024-07250 VVD-NCSC-2025-17 CVE-2024-13163 GHSA-c5xq-93hx-p95r BDU:2025-00375 EUVD-2024-51384 GHSA-g7wm-3q7g-g3q2 BDU:2024-07263 EUVD-2024-30632 EUVD-2024-51397 VVD-CISA-2024-32843 GHSA-f53w-fw63-qjpw GHSA-v7mj-q2hh-7r72 VVD-CISA-2024-32842 CVE-2024-13170 EUVD-2024-51394 BDU:2025-00401 VVD-CISA-2024-13160 BDU:2024-07251 BDU:2025-00398 GHSA-6358-wjwp-64w4 VVD-CISA-2024-13163 VVD-CISA-2024-13169 BDU:2024-07274 BDU:2024-07157 VVD-CISA-2024-13172 GHSA-5fwx-95cc-hcxv CVE-2024-13161 EUVD-2024-35045 BDU:2024-07273 GHSA-wfg8-6fh4-8fp9 CVE-2024-10811 CVE-2024-13171 GHSA-jv5c-8jgx-c489 CVE-2024-13168 CVE-2024-13159 EUVD-2024-51392 BDU:2025-00397 VVD-CISA-2024-32846 GHSA-6v62-48r8-7wh2 VVD-CISA-2024-13170 VVD-CISA-2024-13158 GHSA-2j3p-vpp9-9f53 VVD-CISA-2024-13164 WID-SEC-W-2024-2109 GSD-2024-29847 EUVD-2024-51398 GHSA-gwpx-4h2q-gxjq VVD-CISA-2024-13161 EUVD-2024-35049 GHSA-w8hf-8rpm-xjp2 GHSA-rj4v-5f39-crv6 EUVD-2024-49088 CVE-2024-13164 BDU:2025-00411 BDU:2025-00409 BDU:2025-00405 GHSA-c45c-r247-q8hc CVE-2024-13166 EUVD-2024-51396 EUVD-2024-51390 GHSA-x4fw-fhfj-vm7c BDU:2024-07154 VVD-CISA-2024-8320 EUVD-2024-30628 EUVD-2024-51386 EUVD-2024-51391 BDU:2025-00396 BDU:2024-06794 BDU:2024-07249 CVE-2024-13167 BDU:2025-00404 BDU:2024-07248 GHSA-22q6-7m3g-6r77 GHSA-qccp-2vxv-82w5 GHSA-cfw8-99m9-5qfm GHSA-pvh3-rvqg-w4qc GHSA-6m9g-cw25-j9jc EUVD-2024-51389 EUVD-2024-51387 GHSA-qfx3-m2xp-3pcp EUVD-2024-30629 GHSA-h926-5fmr-p532 GHSA-gg3w-r79x-787f BDU:2025-00403 BDU:2025-00399 GHSA-r268-64hq-mv45 GHSA-35pg-8ph2-rp9c GHSA-qm6j-jqgw-8fcg VVD-CISA-2024-34783 EUVD-2024-49089 VVD-CISA-2024-32848 EUVD-2024-30634 CVE-2024-13165 VVD-CISA-2024-13165 BDU:2024-07268 EUVD-2024-30626 GHSA-g5xq-ccc5-74p4 VVD-CISA-2024-29847 VVD-CISA-2024-13159 BDU:2025-00410 BDU:2024-07156 VVD-ANCHORE-2024-37397 BDU:2025-00407 GHSA-rg56-4h6q-rfgq

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON