CVE-2019-12374

Name: CVE-2019-12374
Creator: NVD / NIST
Published: 2019-06-03T20:29:00.953+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.63%

Last modified Jun 17, 2026

CVE-2019-12374 is a vulnerability of currently unknown severity. A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.. EPSS estimates a 2.63% chance of exploitation in the next 30 days.

Description

A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.

Metrics

EPSS Probability

2.63%

83.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-89

Affected Software

Vendor	Product	Versions	Update
Ivanti	Landesk Management Suite	10.0.1.168	Service Update 5

References

https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-multiple-vulnerabilities/Third Party Advisory
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-sql-injection/Exploit, Third Party Advisory
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-multiple-vulnerabilities/Third Party Advisory
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-sql-injection/Exploit, Third Party Advisory

Timeline

Published: Jun 3, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-12374?

How severe is CVE-2019-12374?

Severity scoring for CVE-2019-12374 is pending analysis. The EPSS model estimates a 2.63% probability of exploitation in the next 30 days.

How do I fix CVE-2019-12374?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-12374?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST