Ivanti EPM

Name: Ivanti EPM
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical29high0medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-29824US	high8.8OT critical	99.9% (100th)	KEV	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29847US	critical9.8	52.9% (99th)	Exploit	2022 SU6	2024-09-12	2 versions
CVE-2024-29826US	high8.8	99.9% (100th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29825US	high8.8	99.9% (100th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29823US	high8.8	99.9% (100th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29827US	high8.8	71.7% (99th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-34781US	high7.2	68.5% (99th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-29822US	high8.8	64.4% (99th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-37397US	—	59.3% (99th)	—	2024 September Security Update	2024-09-12	2 versions
CVE-2024-34783US	high7.2	43.4% (99th)	—	2024 September Security Update	2024-09-12	2 versions
CVE-2024-32848US	high7.2	43.4% (99th)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-34785US	high7.2	25.4% (98th)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-32840US	high7.2	25.4% (98th)	—	2024 September Security Update	2024-09-12	2 versions
CVE-2024-34779US	high7.2	24.0% (98th)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-32845US	high7.2	24.0% (98th)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-34787US	high7.8	17.8% (97th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-29846US	high8.0	8.48% (95th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29830US	high8.0	8.48% (95th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29828US	high8.0	8.48% (95th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-29829US	high8.0	8.23% (95th)	—	no fix	2024-05-31	≤ 2022 SU5 ≤2022 SU5
CVE-2024-32841US	high7.2	3.40% (89th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-32839US	high7.2	3.40% (89th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-37376US	high7.2	3.16% (88th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-32847US	high7.2	3.16% (88th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-37381US	high8.0	3.14% (88th)	—	no fix	2024-07-29	≤ 2024 ≤2024
CVE-2024-32846US	high7.2	2.15% (82nd)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-32843US	high7.2	2.15% (82nd)	—	2024 September Security Update	2024-09-12	2 versions
CVE-2024-32842US	high7.2	2.15% (82nd)	—	2022 SU6	2024-09-12	2 versions
CVE-2024-34784US	high7.2	1.71% (77th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-34782US	high7.2	1.71% (77th)	—	2024 November Security Update	2024-11-13	2 versions
CVE-2024-34780US	high7.2	1.71% (77th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-32844US	—	1.71% (77th)	—	2022 SU6 November Security Update	2024-11-13	2 versions
CVE-2024-22058US	—	0.38% (32nd)	—	no fix	2024-05-31	≤ 2021 ≤2021

weaknesses (5)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')29 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan