漏洞描述 Ivanti Endpoint Manager(EPM)是美国Ivanti公司的一套端点安全管理器。 Ivanti Endpoint Manager(EPM)存在安全漏洞,该漏洞源于Ivanti EPM允许未经身份验证的用户以有限的权限执行任意代码。
相关漏洞推荐 CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass POC 2025-09-01 | Ivanti Endpoint Manager Mobile Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote attacke... CVE-2025-4427: Ivanti Endpoint Manager Mobile 远程命令执行漏洞 POC 2025-09-01 | Ivanti Endpoint Manager Mobile 漏洞都是由于Ivanti Endpoint Manager Mobile的API组件未能正确验证输入的数据而造成的漏洞。攻击者可以利用这个漏洞绕过身份认证,并通过受影响的API执行任何代码,对系统安全... CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass POC 2025-08-01 | Ivanti Endpoint Manager Mobile Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote attacke... ShowDoc /server/index.php?s=/api/adminUpdate/download 文件上传漏洞(CVE-2021-36440) 无POC 2025-09-12 | ShowDoc ShowDoc 2.9.5版本存在一个高危的文件上传漏洞(CVE-2021-36440),该漏洞源于系统未能对上传文件的类型进行充分验证。攻击者可以绕过安全限制上传任意类型的危险文件,包括但不限于PH... CVE-2021-1497: Cisco HyperFlex HX Data Platform - Remote Command Execution POC 2025-09-01 | Cisco HyperFlex HX Data Platform Cisco HyperFlex HX contains multiple vulnerabilities in the web-based management interface that coul...