| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager | = 2024< 2024 | 2024 |
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free