Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-13158

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Published

2025-01-14T18:15:26.020

Last Modified

2025-08-12T15:58:51.657

Status

Analyzed

Source

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-22
    CWE-426
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ivanti endpoint_manager < 2024 Yes
Application ivanti endpoint_manager 2022 Yes
Application ivanti endpoint_manager 2022 Yes
Application ivanti endpoint_manager 2022 Yes
Application ivanti endpoint_manager 2022 Yes
Application ivanti endpoint_manager 2022 Yes
Application ivanti endpoint_manager 2022 Yes
References