CVE-2023-46806: Ivanti Endpoint Manager Mobile

Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days.

An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.

Affected products

• Ivanti Endpoint Manager Mobile: before 12.1.0.0 (fixed in 12.1.0.0)

Published 2024-05-22. Last modified 2026-06-17.