Actively exploited in the wild
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
Ivanti - Endpoint Manager (EPM) · Listed in the CISA KEV since 2024-10-02. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-29824
HighCVSS 8.8KEVSummary
An unspecified SQL Injection vulnerability in the Core server of Ivanti EPM 2022 SU5 and earlier allows an unauthenticated attacker within the same network to execute arbitrary code.
Risk Assessment
An attacker on the internal network could exploit this vulnerability to take control of the Ivanti EPM server, potentially compromising data confidentiality and integrity.
Recommendation
Update Ivanti EPM to a version newer than 2022 SU5. Restrict network access and apply segmentation to minimize risk.
Other vulnerabilities in Ivanti EPM
See all- CVE-2024-13161CriticalActively exploited
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
- CVE-2024-13160CriticalActively exploited
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
- CVE-2024-13159CriticalActively exploited
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
Original NVD description (English source)
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.