Lucene search
HistoryMay 31, 2024 - 6:15 p.m.
CVE-2024-29822
sql injection
ivanti epm
core server
arbitrary code execution
unauthenticated attacker
network-based
CVSS3
9.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
28.8%
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Related
cvelist
cvelist
CVE-2024-29822
2024-05-31 17:38:31
zdi
zdi
cve
cve
CVE-2024-29822
2024-05-31 18:15:10
vulnrichment
vulnrichment
CVE-2024-29822
2024-05-31 17:38:31
nessus
nessus
Ivanti Endpoint Manager - May 2024 Security Update
2024-05-25 00:00:00
thn
thn
Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
2024-05-23 09:21:00
CVSS3
9.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
28.8%
Related for NVD:CVE-2024-29822