Intel Endpoint Management Assistant vulnerabilities

9 CVEs affecting Intel Endpoint Management Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-35990, published 2026-05-12.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12315, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
• CVE-2021-0013, published 2021-11-17. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.
• CVE-2022-26341, published 2022-11-11. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to…
• CVE-2020-12316, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.
• CVE-2025-35990, published 2026-05-12. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged…
• CVE-2022-30297, published 2022-11-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2024-32483, published 2024-11-13. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-45128, published 2023-05-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2022-38056, published 2023-02-16. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access.