CVE Watch—

CVE-2024-13159

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

10 de mar. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Ivanti / Endpoint Manager (EPM)

Vulnerabilidade

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Adicionado ao KEV

10 de mar. de 2025

Corrigir até

31 de mar. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13159

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-29824—

100.0%

KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2024-13161—

99.8%

KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2024-13160—

99.8%

KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—