cbcvebase.
CVE-2020-13769
published 2020-11-16

CVE-2020-13769: LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.

PriorityP259high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
2.64%
83.6th percentile
LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.

Affected

1 ranges
VendorProductVersion rangeFixed in
ivantiendpoint_manager<= 2020.1—

Detection & IOCsextracted from sources · hover to see the quote

url/remotecontrolauth/api/device↗
pathLDMS/alert_log.aspx↗
  • →Monitor HTTP requests targeting LDMS/alert_log.aspx combined with a /remotecontrolauth/api/device payload for SQL injection patterns (e.g., SQL metacharacters, UNION/SELECT keywords) indicative of CVE-2020-13769 exploitation. ↗
  • ·Vulnerability affects Ivanti Endpoint Manager through version 2020.1; ensure patched versions are deployed and confirm the affected endpoint paths are not externally exposed. ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.