CVE-2024-34785

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34785

CVE-2024-34785 details (Ivanti Endpoint Manager EPM): An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update, allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected versions include Ivanti Endpoint Manager 2024 and...

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager EPM, including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows - CVE-2024-29847 CVSS score: 10.0 - A deserialization of...

CVE-2024-34785

creationtimestamp| type| source ---|---|--- 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1369 2024-09-12 04:44:40+00:00| seen| https://t.me/cvedetector/5421...