Ivanti Endpoint Manager
Moderate fix1 remedy
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 2024 SU5
Ivanti Endpoint Manager Core Server Credential Leak Vulnerability
Vulnerability
Patched
A vulnerability exists in the Core Server of Ivanti Endpoint Manager in versions through 2024 SU5. This vulnerability allows remote authenticated attackers to leak access credentials by exploiting an exposed dangerous method.
Impact
Exploitation of this vulnerability could lead to unauthorized access to credentials, potentially allowing for further attacks or privilege escalation.
Remediation
Users can update to Ivanti Endpoint Manager 2024 SU6, which is available for download through the Ivanti License System (ILS).
Added: May 12, 2026, 3:24 PM
Updated: May 12, 2026, 3:24 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
2.5exploitability
4.9remediation
7.7relevance
8.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.