Ivanti EPMM

Name: Ivanti EPMM
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical3high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-35082US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2023-08-15	≤ 11.10 ≤11.10
CVE-2023-35081US	high7.2OT critical	63.6% (99th)	KEV	11.10.0.3	2023-08-03	11.10.0.3 → 11.10.0.3
CVE-2024-22026US	medium6.7	1.10% (65th)	Exploit	12.0.0.0	2024-05-22	3 versions
CVE-2024-36131US	high8.8	2.29% (83rd)	—	12.1.0.1	2024-08-07	12.1.0.1 → 12.1.0.1
CVE-2023-39335US	critical9.8	2.28% (83rd)	—	no fix	2023-11-15	3 versions
CVE-2024-36130US	critical9.8	2.25% (83rd)	—	12.1.0.1	2024-08-07	12.1.0.1 → 12.1.0.1
CVE-2023-39337US	critical9.1	1.90% (80th)	—	no fix	2023-11-15	3 versions
CVE-2024-36132US	high7.5	1.25% (69th)	—	12.1.0.1	2024-08-07	12.1.0.1 → 12.1.0.1
CVE-2023-46807US	—	1.05% (64th)	—	12.1.0.0	2024-05-22	12.1.0.0 → 12.1.0.0
CVE-2023-46806US	—	0.97% (62nd)	—	12.1.0.0	2024-05-22	12.1.0.0 → 12.1.0.0
CVE-2024-34788US	medium6.5	0.94% (61st)	—	12.1.0.1	2024-08-07	12.1.0.1 → 12.1.0.1

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.