CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-01-14
Ivanti Endpoint Manager (EPM) Absolute Path Traversal and Information Disclosure Vulnerability (CVE-2024-13161) Security Advisory
[Affected Scope] Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update
[Impact] Remote unauthenticated attackers can exploit absolute path traversal to leak highly sensitive system information
[Mitigation] Immediately apply the official Ivanti security updates and restrict access to the EPM management interfaces