CVE-2024-36130

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Aug 7, 2024 (Aug 7, 2024)

Modified

Jun 17, 2026

Description

An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the underlying operating system of the appliance.

Vendors: ivanti
Products: endpoint manager mobile
Weakness: CWE-287, CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.