Ivanti Endpoint Manager

Name: Ivanti Endpoint Manager
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical38high7medium0low

updated 2026-10-24

vulnerabilities (94)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-13159US	high7.5OT critical	100.0% (100th)	KEV	2022 SU6 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13160US	high7.5OT critical	91.0% (100th)	KEV	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13161US	high7.5OT critical	89.8% (100th)	KEV	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2026-1603US	high7.5OT critical	88.3% (100th)	KEV	2024 SU5	2026-02-10	3 versions
CVE-2024-29847US	critical9.8	52.9% (99th)	Exploit	2024 Security Patch	2024-09-12	3 versions
CVE-2024-50330US	critical9.8	40.3% (99th)	Exploit	2024 November Security Update	2024-11-12	4 versions
CVE-2024-34781US	high7.2	68.5% (99th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-13162US	—	65.0% (99th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-37397US	—	59.3% (99th)	—	2024 Security Patch	2024-09-12	3 versions
CVE-2024-34783US	high7.2	43.4% (99th)	—	2022 SU6	2024-09-12	3 versions
CVE-2024-32848US	high7.2	43.4% (99th)	—	2022 SU6	2024-09-12	5 versions
CVE-2025-10573US	medium6.1	33.5% (98th)	—	2024 SU4 SR1	2025-12-09	3 versions
CVE-2024-50326US	high7.2	26.5% (98th)	—	2024 November Security Update	2024-11-12	4 versions
CVE-2024-34785US	high7.2	25.4% (98th)	—	2022 SU6	2024-09-12	3 versions
CVE-2024-32840US	high7.2	25.4% (98th)	—	2022 SU6	2024-09-12	3 versions
CVE-2024-34779US	high7.2	24.0% (98th)	—	2024 Security Patch	2024-09-12	3 versions
CVE-2024-32845US	high7.2	24.0% (98th)	—	2024 SU1	2024-09-12	3 versions
CVE-2025-9712US	—	23.9% (98th)	—	2024 SU3 Security Update 1	2025-09-09	4 versions
CVE-2024-8191US	critical9.8	20.3% (97th)	—	2022 SU6	2024-09-10	5 versions
CVE-2024-50324US	high7.2	18.7% (97th)	—	2022 SU6 November Security Update	2024-11-12	4 versions
CVE-2024-34787US	high7.8	17.8% (97th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-13171US	—	17.5% (97th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2025-9872US	—	15.8% (97th)	—	2024 SU3 Security Update 1	2025-09-09	4 versions
CVE-2025-9713US	—	15.3% (97th)	—	2024 SU4	2025-10-13	5 versions
CVE-2023-39336US	high8.8	9.97% (96th)	—	2022 SU 5	2024-01-09	< 2022 SU 5
CVE-2024-13163US	—	9.17% (95th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-50322US	high7.8	6.04% (93rd)	—	2022 SU6 November Security Update	2024-11-12	4 versions
CVE-2023-35084US	critical9.8	3.84% (90th)	—	2022 su3	2023-10-18	< 2022 su3
CVE-2024-10811US	high7.5	3.52% (89th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13158US	—	3.44% (89th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-32841US	high7.2	3.40% (89th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-32839US	high7.2	3.40% (89th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-37376US	high7.2	3.16% (88th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-32847US	high7.2	3.16% (88th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-37381US	high8.0	3.14% (88th)	—	no fix	2024-07-29	≤ 2024 flat
CVE-2024-13170US	—	2.83% (87th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13168US	—	2.75% (86th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13167US	—	2.75% (86th)	—	2022 SU6 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13165US	—	2.75% (86th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2024-13166US	—	2.54% (85th)	—	2024 January-2025 Security Update	2025-01-14	4 versions
CVE-2023-35077US	high7.5	2.21% (82nd)	—	7.9.1.285	2023-07-21	7.9.1.285 → 7.9.1.285
CVE-2024-32846US	high7.2	2.15% (82nd)	—	2022 SU6	2024-09-12	3 versions
CVE-2024-32843US	high7.2	2.15% (82nd)	—	2022 SU6	2024-09-12	3 versions
CVE-2024-32842US	high7.2	2.15% (82nd)	—	2024 Security Patch	2024-09-12	3 versions
CVE-2025-13659US	—	1.96% (80th)	—	2024 SU4 SR1	2025-12-09	3 versions
CVE-2024-8321US	high8.6OT elevated	1.82% (79th)	—	2024 Security Patch	2024-09-10	5 versions
CVE-2024-50328US	high7.2	1.78% (78th)	—	2024 November Security Update	2024-11-12	4 versions
CVE-2024-50329US	high8.8	1.76% (78th)	—	2024 November Security Update	2024-11-12	4 versions
CVE-2025-62390US	—	1.74% (78th)	—	2024 SU4	2025-10-13	5 versions
CVE-2025-62389US	—	1.74% (78th)	—	2024 SU4	2025-10-13	5 versions

showing 50 of 94

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')42 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-36Absolute Path Traversal4 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs

sources (3)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)90 CVEs
EUEU Vulnerability Database (ENISA)71 CVEs
NLNCSC-NL (CSAF)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan