# Ivanti Endpoint Manager


- [CVE-2024-13159](https://insights.sbomify.com/CVE-2024-13159/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-13160](https://insights.sbomify.com/CVE-2024-13160/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-13161](https://insights.sbomify.com/CVE-2024-13161/): Ivanti Endpoint Manager (EPM) Absolute Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-29824](https://insights.sbomify.com/CVE-2024-29824/): Ivanti Endpoint Manager (EPM) SQL Injection (critical 9.6, exploited in the wild)
- [CVE-2026-1603](https://insights.sbomify.com/CVE-2026-1603/): Ivanti Endpoint Manager (EPM) Authentication Bypass (high 8.6, exploited in the wild)
- [CVE-2024-29847](https://insights.sbomify.com/CVE-2024-29847/): Deserialization in EPM (critical 10.0)
- [CVE-2020-13774](https://insights.sbomify.com/CVE-2020-13774/): File upload in n/a (critical 9.9)
- [CVE-2024-10811](https://insights.sbomify.com/CVE-2024-10811/): Path traversal in Endpoint Manager (critical 9.8)
- [CVE-2024-50330](https://insights.sbomify.com/CVE-2024-50330/): SQL injection in Endpoint Manager (critical 9.8)
- [CVE-2023-35084](https://insights.sbomify.com/CVE-2023-35084/): Deserialization in Endpoint Manager (critical 9.8)
- [CVE-2023-28323](https://insights.sbomify.com/CVE-2023-28323/): Deserialization in Ivanti Endpoint Manager (critical 9.8)
- [CVE-2022-27773](https://insights.sbomify.com/CVE-2022-27773/): Privilege escalation in Ivanti Endpoint Manger (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/ivanti/endpoint-manager/