CVE-2024-29824 Ivanti Endpoint Manager (EPM)
Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.
- CVSS
- not scored
On CISA’s exploited list
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
- Added
- 2024-10-02
- Federal patch deadline
- 2024-10-23
- Ransomware use
- not known