Lucene search
HistoryMay 31, 2024 - 6:15 p.m.
CVE-2024-22059
sql injection
web component
ivanti neurons
remote authenticated user
database access
dos
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0
Percentile
9.0%
A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.
Related
cve
cve
CVE-2024-22059
2024-05-31 18:15:10
cvelist
cvelist
CVE-2024-22059
2024-05-31 17:38:31
vulnrichment
vulnrichment
CVE-2024-22059
2024-05-31 17:38:31
thn
thn
Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
2024-05-23 09:21:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-22059