Lucene search

CVE-2024-32845

🗓️ 12 Sep 2024 02:02:15Reported by hackeroneType

Unspecified SQL injection in Ivanti EPM allows remote code executio

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-32845	12 Sep 202401:09	–	vulnrichment
NVD	CVE-2024-32845	12 Sep 202402:15	–	nvd
Cvelist	CVE-2024-32845	12 Sep 202401:09	–	cvelist
The Hacker News	Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities	11 Sep 202406:30	–	thn
Tenable Nessus	Ivanti Endpoint Manager 2022 - September Security Update	18 Sep 202400:00	–	nessus
Tenable Nessus	Ivanti Endpoint Manager 2024 - September 2024 Security Update	13 Sep 202400:00	–	nessus

Nvd

Vulners

Node

ivanti endpoint_managerRange<2022

ivanti endpoint_managerMatch2022-

ivanti endpoint_managerMatch2022su1

ivanti endpoint_managerMatch2022su2

ivanti endpoint_managerMatch2022su3

ivanti endpoint_managerMatch2022su4

ivanti endpoint_managerMatch2022su5

ivanti endpoint_managerMatch2024-

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "EPM",
    "versions": [
      {
        "version": "2024 September Security Update",
        "status": "affected",
        "lessThan": "2024 September Security Update",
        "versionType": "custom"
      },
      {
        "version": "2022 SU6",
        "status": "affected",
        "lessThan": "2022 SU6",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Sep 2024 02:15Current

9.5High risk

Vulners AI Score9.5

CVSS37.2 - 9.1

EPSS0.00418

SSVC

CWE-89