coldbraid

CVE-2024-13160 Ivanti Endpoint Manager (EPM)

Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

CVSS
not scored

CWE-36

On CISA’s exploited list

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Added
2025-03-10
Federal patch deadline
2025-03-31
Ransomware use
not known