Endpoint Manager
Vendor:
First CVE: Dec 11, 2017 · Active for 8 years
116
Total CVEs
More Total CVEs than 99% of tracked products
14.5
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 64% of tracked products
4.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Endpoint Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 11, 2017
8 years ago
Most Recent CVE
May 12, 2026
77 days ago
CVE Severity & Scoring
Endpoint Manager116 CVEs
21%
71%
9%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local23 (19.8%)
Network81 (69.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network12 (10.3%)
Attack Complexity
Low115 (99.1%)
High1 (0.9%)
Unknown0 (0.0%)
User Interaction
None97 (83.6%)
Unknown0 (0.0%)
Required19 (16.4%)
Privileges Required
Low39 (33.6%)
High28 (24.1%)
None49 (42.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (116 CVEs).
116 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-29824HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 98 | YES | YES |
CVE-2026-1603HIGH An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data. | Feb 10, 2026 | 7.5 | 97 | YES | YES |
CVE-2024-13159HIGH Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensit | Jan 14, 2025 | 7.5 | 97 | YES | YES |
CVE-2024-13161HIGH Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensit | Jan 14, 2025 | 7.5 | 96 | YES | YES |
CVE-2024-13160HIGH Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensit | Jan 14, 2025 | 7.5 | 96 | YES | YES |
CVE-2024-29826HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 79 | NO | NO |
CVE-2024-29825HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 79 | NO | NO |
CVE-2024-29823HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 79 | NO | NO |
CVE-2024-29827HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 68 | NO | NO |
CVE-2024-29822HIGH An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code. | May 31, 2024 | 8.8 | 65 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (116 CVEs).
CISA KEV
5 CVEs
4.3% of CVEs· 98th percentile
Metasploit
2 CVEs
1.7% of CVEs· 97th percentile
Nuclei
5 CVEs
4.3% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (116 CVEs).
Media Mentions
Signals from CVEs in this product scope (116 CVEs).
Top CNAs Publishing CVEs For Endpoint Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2024 | 84 | 7.3 | 9.3% | 4 | 4 |
| 2022 | 79 | 7.7 | 20.0% | 4 | 4 |
| 2021.1.1 | 1 | 6.7 | 0.3% | 0 | 0 |
| 2021.1 | 1 | 9.8 | 2.6% | 0 | 0 |
| 2020.1 | 1 | 9.9 | 4.8% | 0 | 0 |
| 2019.1 | 1 | 9.9 | 4.8% | 0 | 0 |
| 2018.3 | 1 | 9.8 | 4.3% | 0 | 0 |
| 2018.1 | 1 | 9.8 | 4.3% | 0 | 0 |
| 2017.3 | 2 | 9.3 | 3.4% | 0 | 0 |
| 2017.1 | 1 | 8.8 | 2.4% | 0 | 0 |
| 2016.4 | 1 | 8.8 | 2.4% | 0 | 0 |