CVE-2020-13774

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations on the uploaded image, which upon failure will leave the temporarily created files in an accessible location on the server.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce/Third Party Advisory
https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce/Third Party Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-137756.5ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no CVE-2020-137766.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by CVE-2020-137777.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authent CVE-2020-137788.8rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxA CVE-2020-13787.5An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who su CVE-2020-137828.8D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection.CVE-2020-137837.5D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information.CVE-2020-137847.5D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator.CVE-2020-137857.5D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength.CVE-2020-137868.8D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF.CVE-2020-137877.5D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information.CVE-2020-137884.3Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on