CVE Watch—

CVE-2024-13160

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

91.0%

p100

KEV

SIM

10 de mar. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

91.0%EPSS · 30 dias91.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Ivanti / Endpoint Manager (EPM)

Vulnerabilidade

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Adicionado ao KEV

10 de mar. de 2025

Corrigir até

31 de mar. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13160

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2024-13159—

100.0%

KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—CVE-2024-29824—

100.0%

KEV—80Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability—CVE-2024-13161—

99.8%

KEV—80Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability—