[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTkcsFXqKZJXSzJIIqhtgAFMnInCXIBoPMPgqAHMx38g":3,"g5a-risk:CVE-2024-13161":146},{"success":4,"data":5,"meta":143},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":54,"references":55,"referencesCount":54,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":4,"cisaInfo":82,"otxData":29,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":141,"notableEvents":142},"CVE-2024-13161","What is CVE-2024-13161?","Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.","Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated ...","2025-01-14T18:15:26.64","2025-10-24T14:48:48.927",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.8,"CRITICAL",null,3.9,5.9,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},3.6,[],[],0.88518,[39,39,39,39,39,39,39],"High",[43,48,51],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ivanti","endpoint_manager","*","cpe:2.3:a:ivanti:endpoint_manager:*:-:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"2022","cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"2024","cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",3,[56,61,66],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FSecurity-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6","Ivanti",[60],"Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-13161","CISA",[65],"US Government Resource",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.horizon3.ai\u002Fattack-research\u002Fattack-blogs\u002Fivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities\u002F","Horizon3",[70,71],"Exploit","Third Party Advisory",[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-36","Absolute Path Traversal","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as \"\u002Fabs\u002Fpath\" that can resolve to a location that is outside of that directory.","This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.","Draft","Base","Simple",1,{"shortDescription":83,"requiredAction":83,"vulnerabilityName":83,"dateAdded":29},"",[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2024-13161? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-13161, a high severity cyber security vulnerability from 2025. High exploit probability (88.5%). Absolute path traversal i...","CVE-2024-13161, CVE-2024-13161 vulnerability, CVE-2024-13161 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, ivanti security, endpoint_manager vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-13161",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-13161","Cybersecurity","CVE-2024-13161, CVE-2024-13161 vulnerability, CVE-2024-13161 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":29,"Negate":29,"Nodes":112},[113],{"Operator":114,"Negate":115,"CPEMatch":116},"OR",false,[117,119,121,124,127,130,133,136,139],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":118,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":49,"VersionEndIncluding":29},"11BA6FEC-4862-4799-B8A1-9CEF9FE1B147",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":120,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"46580865-5177-4E55-BDAC-73DA4B472B35",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*","E57E12B5-B789-450C-9476-6C4C151E6993",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":126,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*","E47C65B3-56DD-4D65-8B4B-6AFFE28E94F2",{"Vulnerable":4,"Criteria":128,"MatchCriteriaID":129,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*","10D6EAB7-B14B-45E9-92B9-4FADFBBB08AF",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":132,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*","1877FB55-76BA-4714-ABB8-47258132F537",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":135,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*","4F9E8D45-5F12-4D45-A74E-C314FA3618A3",{"Vulnerable":4,"Criteria":137,"MatchCriteriaID":138,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:a:ivanti:endpoint_manager:2022:su6:*:*:*:*:*:*","5BB1FEE4-8B72-42A4-A7E1-DB3B10CE5CEE",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":140,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"6C7283FE-C10A-4E37-B004-15FB0CAC49A5",[],[],{"lastModified":11,"cacheTime":144,"version":145},1793211655702,"2.0",{"score":147,"band":148,"action":149,"scoredAt":150},90,"Critical","Emergency patch","2026-07-01T10:35:01.20149+00:00"]