CVE-2019-10651
Last modified
CVE-2019-10651 is a vulnerability of currently unknown severity. An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update.. EPSS estimates a 4.27% chance of exploitation in the next 30 days.
Description
An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Endpoint Manager | 2017.3 |
| Ivanti | Endpoint Manager | 2018.1 |
| Ivanti | Endpoint Manager | 2018.3 |
References
- https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019Patch, Vendor Advisory
- https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-10651?
How severe is CVE-2019-10651?
How do I fix CVE-2019-10651?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-10646Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) …
- CVE-2019-10647ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbi…
- CVE-2019-10648Robocode through 1.9.3.5 allows remote attackers to cause ex…
- CVE-2019-10649In ImageMagick 7.0.8-36 Q16, there is a memory leak in the f…5.5
- CVE-2019-1065An elevation of privilege vulnerability exists when the Wind…7.8
- CVE-2019-10650In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer ov…
- CVE-2019-10652An issue was discovered in flatCore 1.4.7. acp/acp.php allow…
- CVE-2019-10653An issue was discovered in Hsycms V1.1. There is a SQL injec…
- CVE-2019-10654The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, a…
- CVE-2019-10655Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.…9.8
- CVE-2019-10656Grandstream GWN7000 before 1.0.6.32 devices allow remote aut…8.8
- CVE-2019-10657Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8…6.5
Are you affected by CVE-2019-10651?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST