Vulnerabilities > Ivanti

DATE CVE VULNERABILITY TITLE RISK
2020-11-16 CVE-2020-13773 Cross-Site Scripting vulnerability in Ivanti Endpoint Manager
Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm_splitcollapse.aspx, /LDMS/alert_log.aspx, /LDMS/ServerList.aspx, /LDMS/frm_coremainfrm.aspx, /LDMS/frm_findfrm.aspx, /LDMS/frm_taskfrm.aspx, and /LDMS/query_browsecomp.aspx.
network
ivanti CWE-79
3.5
2020-11-16 CVE-2020-13772 Unspecified vulnerability in Ivanti Endpoint Manager
In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating system, local pathnames, and environment variables with no authentication required.
network
low complexity
ivanti
5.0
2020-11-16 CVE-2020-13769 SQL Injection vulnerability in Ivanti Endpoint Manager
LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.
network
low complexity
ivanti CWE-89
6.5
2020-11-12 CVE-2020-13774 Unrestricted Upload of File With Dangerous Type vulnerability in Ivanti Endpoint Manager 2019.1/2020.1
An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file.
network
low complexity
ivanti CWE-434
critical
9.0
2020-11-12 CVE-2020-13771 Uncontrolled Search Path Element vulnerability in Ivanti Endpoint Manager
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking.
local
ivanti CWE-427
6.9
2020-11-12 CVE-2020-13770 Incorrect Default Permissions vulnerability in Ivanti Endpoint Manager
Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the issue can be used to escalate privileges from a local standard or service account having SeImpersonatePrivilege (eg.
local
low complexity
ivanti CWE-276
7.2
2020-08-06 CVE-2020-13793 USE of Hard-Coded Credentials vulnerability in Ivanti DSM Netinst 5.1
Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key.
network
low complexity
ivanti CWE-798
7.5
2020-08-06 CVE-2020-12441 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ivanti products
Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent.
network
low complexity
ivanti CWE-119
critical
10.0
2020-05-18 CVE-2019-17066 Improper Privilege Management vulnerability in Ivanti Workspace Control
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries.
7.2
2020-04-28 CVE-2020-12442 SQL Injection vulnerability in Ivanti Avalanche 6.3
Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250.
network
low complexity
ivanti CWE-89
7.5