← All advisories

High severity8.8NVD Advisory· Published Nov 16, 2020· Updated Jun 17, 2026

CVE-2020-13769

CVE-2020-13769

Description

LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.

Affected products

3

Ivanti/Endpoint Manager2 versions
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*range: <=2020.1
- (no CPE)range: <=2020.1
Ivanti/Endpoint Managerdescription

Patches

Vulnerability mechanics

References

2

labs.jumpsec.com/advisory-cve-2020-13769-ivanti-uem-sql-injection/nvdExploitThird Party Advisory
forums.ivanti.com/s/nvdPermissions RequiredVendor Advisory

News mentions

0

No linked articles in our index yet.