An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
RCE
Ivanti
Endpoint Manager
NVD
CVSS 3.1
7.2
EPSS
2.1%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
RCE
Ivanti
Endpoint Manager
NVD
CVSS 3.1
7.2
EPSS
25.4%
Prev
Page 2 of 2