CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-01-14
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13159) Security Advisory
[Affected Scope] Ivanti EPM 2024 prior to the January 2025 Security Update, and EPM 2022 SU6 prior to the January 2025 Security Update
[Impact] A remote unauthenticated attacker can exploit an absolute path traversal vulnerability to leak highly sensitive system information and credentials
[Mitigation] Immediately apply the official Ivanti January 2025 Security Update and restrict access to the EPM management console