VULNERABILITY INTELLIGENCE

CVE-2024-29824

CVSS score8.8 HIGH
EPSS probability99.94%
CISA KEVKnown exploited vulnerability
Published2024-05-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

Vendor / product: Ivanti / Endpoint Manager (EPM)

Description

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Weakness classification

  • nvd@nist.gov: CWE-89
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references