Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

Published: Jan 14, 2025
Updated: May 4, 2025
CVE: CVE-2024-13159
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

CWE-36

Affected Software
References

Software	From	Fixed in
ivanti / endpoint_manager	2022-su1	2022-su1.x
ivanti / endpoint_manager	2022	2022.x
ivanti / endpoint_manager	2022-su2	2022-su2.x
ivanti / endpoint_manager	2022-su3	2022-su3.x
ivanti / endpoint_manager	2022-su4	2022-su4.x
ivanti / endpoint_manager	2022-su5	2022-su5.x
ivanti / endpoint_manager	-	2022
ivanti / endpoint_manager	2024	2024.x
ivanti / endpoint_manager	2022-su6	2022-su6.x