Endpoint Manager (EPM) 2022 vulnerabilities

4 advisories affect Ivanti Endpoint Manager (EPM) 2022, 4 already exploited by attackers. Latest: March 10, 2025.

Running Endpoint Manager (EPM) 2022 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Endpoint Manager (EPM) 2022 alerts

Vulnerability	Severity	Affected versions
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13161 · March 10, 2025	Critical 9.8 Exploited	2022 – 2022 SU6 Fixed in 2022 SU6 January-2025 Security Update
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13160 · March 10, 2025	Critical 9.8 Exploited	2022 – 2022 SU6 Fixed in 2022 SU6 January-2025 Security Update
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13159 · March 10, 2025	Critical 9.8 Exploited	2022 – 2022 SU6 Fixed in 2022 SU6 January-2025 Security Update
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability CVE-2024-29824 · October 2, 2024	High 8.8 Exploited	from 2022 to 2022 SU5

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other Endpoint Manager (EPM) versions: 2024