CVE-2019-10651 is a critical remote code execution vulnerability affecting Ivanti Endpoint Manager (EPM) Core Server versions 2017.3 (prior to SU7) and 2018.x (prior to 2018.3 SU3). This vulnerability carries a CVSS score of 9.8 (Critical), indicating it can be exploited remotely with low attack complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and there is minimal community discussion or media coverage, its high EPSS and FAUCET risk scores suggest a significant potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2017.3CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2017.3:*:*:*:*:*:*:* | ||
2018.1CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2018.1:*:*:*:*:*:*:* | ||
2018.3CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2018.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.