Ivanti Endpoint Manager (EPM) vulnerabilities

6 advisories, 6 actively exploited. Last update: March 9, 2026.

By version: Endpoint Manager (EPM) 2024 (4) · Endpoint Manager (EPM) 2022 (4)

Running Endpoint Manager (EPM) devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Endpoint Manager (EPM) alerts

CVE-2026-1603March 9, 2026High 8.6Exploited
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
CVE-2024-13161March 10, 2025Critical 9.8Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2024-13160March 10, 2025Critical 9.8Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2024-13159March 10, 2025Critical 9.8Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVE-2024-29824October 2, 2024High 8.8Exploited
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVE-2021-44529March 25, 2024Critical 9.8Exploited
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability