An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/Security-Advisory-May-2024 | Vendor Advisory |
| https://forums.ivanti.com/s/article/Security-Advisory-May-2024 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Oct 2024, 16:45
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ivanti endpoint Manager
Ivanti |
|
| CWE | CWE-89 | |
| References | () https://forums.ivanti.com/s/article/Security-Advisory-May-2024 - Vendor Advisory | |
| CPE | cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
31 May 2024, 19:14
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-31 18:15
Updated : 2024-11-29 16:45
NVD link : CVE-2024-29824
Mitre link : CVE-2024-29824
JSON object : View
Products Affected
ivanti
- endpoint_manager
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')