CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34784

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495515800861 2024-11-13 04:07:31+00:00| seen| https://t.me/cvedetector/10782 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1500/...

CVE-2024-34784

Ivanti Endpoint Manager (EPM) 2024 and earlier versions are affected by CVE-2024-34784 due to a SQL injection that allows a remote authenticated attacker with admin privileges to achieve remote code execution. The vulnerability is reported in the Ivanti advisory and corroborated by Red Hat, NVD, ...

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...