Vulnerabilitycritical

Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)

Security Affairsby @securityaffairsMay 23, 2024 · 10:49 UTC (May 23, 2024)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-29822 CVE-2024-29823 CVE-2024-29824 CVE-2024-29825 CVE-2024-29826 CVE-2024-29827 CVE-2024-29828 CVE-2024-29829 CVE-2024-29830 CVE-2024-29846

Tags: cve-2024-29822 cve-2024-29823 cve-2024-29824 cve-2024-29825 cve-2024-29826 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-29825 +8 related CVEs CVE-2024-29826 CVE-2024-29823 CVE-2024-29827 CVE-2024-29822 CVE-2024-29828 CVE-2024-29830 CVE-2024-29846 CVE-2024-29829	An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…	8.8 group max	100%		May 31, 2024
CVE-2024-29824	Unauthenticated SQL Injection to RCE in Ivanti Endpoint Manager (EPM) Core Server	8.8	100%	KEV	May 31, 2024 KEV Oct 2, 2024

From the original article

2 min read at securityaffairs.com

Ivanti addressed multiple flaws in the Endpoint Manager (EPM), including remote code execution vulnerabilities. Ivanti this week rolled out security patches to address multiple critical vulnerabilities in the Endpoint Manager (EPM). A remote attacker can exploit the flaws to gain code execution under certain conditions.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.