CVE-2020-13773

概要

参考情報

• forums.ivanti.com/s · Permissions Required
• labs.jumpsec.com/cve-2020-13773-ivanti-uem-reflected-xss · Exploit

endpoint manager のその他の脆弱性

• CVE-2026-8111高 8.8SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote…
• CVE-2026-8110高 7.8Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to es…
• CVE-2026-8109中 6.5An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to …
• CVE-2026-1603高 7.5悪用確認済み（CISA KEV）An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored…
• CVE-2026-1602中 6.5SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data…