| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager | = 2022= 2024< 2022 | 2022 |
Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to execute arbitrary javascript in a victim's browser. Unlikely user interaction is required.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free