Known Vulnerabilities for Landesk Management Suite by Ivanti
Listed below are 6 of the newest known vulnerabilities associated with "Landesk Management Suite" by "Ivanti".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-12377 | A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168... | 9.8 - CRITICAL | 2019-06-03 | 2019-06-04 |
| CVE-2019-12376 | Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update ... | 4.5 - MEDIUM | 2019-06-03 | 2019-06-26 |
| CVE-2019-12375 | Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remo... | 6.3 - MEDIUM | 2019-06-03 | 2020-08-24 |
| CVE-2019-12374 | A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Updat... | 8.1 - HIGH | 2019-06-03 | 2019-06-04 |
| CVE-2019-12373 | Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Servi... | 9 - CRITICAL | 2019-06-03 | 2020-08-24 |
| CVE-2016-3147 | Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows remote attackers ... | 9.8 - CRITICAL | 2017-01-23 | 2021-04-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ivanti | Landesk Management Suite | 10.0.1.168 | service_update_5 | All | All |