Ivanti Endpoint Manager <2022 SU6 November Security Update

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical16high0medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-50330US	critical9.8	40.3% (99th)	Exploit	no fix	2024-11-12	—
CVE-2024-34781US	high7.2	68.5% (99th)	—	no fix	2024-11-13	—
CVE-2024-50326US	high7.2	26.5% (98th)	—	no fix	2024-11-12	—
CVE-2024-50324US	high7.2	18.7% (97th)	—	no fix	2024-11-12	—
CVE-2024-34787US	high7.8	17.8% (97th)	—	no fix	2024-11-13	—
CVE-2024-50322US	high7.8	6.04% (93rd)	—	no fix	2024-11-12	—
CVE-2024-32841US	high7.2	3.40% (89th)	—	no fix	2024-11-13	—
CVE-2024-32839US	high7.2	3.40% (89th)	—	no fix	2024-11-13	—
CVE-2024-37376US	high7.2	3.16% (88th)	—	no fix	2024-11-13	—
CVE-2024-32847US	high7.2	3.16% (88th)	—	no fix	2024-11-13	—
CVE-2024-50328US	high7.2	1.78% (78th)	—	no fix	2024-11-12	—
CVE-2024-50329US	high8.8	1.76% (78th)	—	no fix	2024-11-12	—
CVE-2024-34784US	high7.2	1.71% (77th)	—	no fix	2024-11-13	—
CVE-2024-34782US	high7.2	1.71% (77th)	—	no fix	2024-11-13	—
CVE-2024-34780US	high7.2	1.71% (77th)	—	no fix	2024-11-13	—
CVE-2024-32844US	—	1.71% (77th)	—	no fix	2024-11-13	—
CVE-2024-50327US	high7.2	1.05% (64th)	—	no fix	2024-11-12	—
CVE-2024-50323US	high7.8	0.67% (52nd)	—	no fix	2024-11-12	—
CVE-2024-10256US	—	0.21% (11th)	—	no fix	2024-12-10	—

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')14 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.