| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager | ≤ 2020.1 |
LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free