CVE-2019-12374

PoC —

CVSS 3.0

8.1 high

EPSS

3%p85

Published

Jun 3, 2019 (Jun 3, 2019)

Modified

Jun 17, 2026

Description

A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.

Vendors: ivanti
Products: landesk management suite
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.