Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

🗓️ 03 Oct 2024 06:06:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 36 Views

Ivanti Endpoint Manager SQL Injection Flaw Actively Exploited, Urgent Patch Required by Agencie

Reporter	Title	Published	Views	Family All 111
zdt	Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Exploit	9 Jul 202400:00	–	zdt
githubexploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	24 Sep 202422:24	–	githubexploit
githubexploit	Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance	16 Sep 202415:33	–	githubexploit
githubexploit	Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance	4 Mar 202511:34	–	githubexploit
githubexploit	Exploit for Path Traversal in Ivanti Endpoint_Manager_Cloud_Services_Appliance	13 Nov 202414:12	–	githubexploit
githubexploit	Exploit for SQL Injection in Ivanti Endpoint_Manager	12 Jun 202413:53	–	githubexploit
githubexploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	12 Oct 202402:17	–	githubexploit
githubexploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	3 Apr 202018:47	–	githubexploit
attackerkb	CVE-2024-29824	31 May 202400:00	–	attackerkb
attackerkb	CVE-2024-7593	13 Aug 202400:00	–	attackerkb

07 Oct 2024 06:11Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 39.6

EPSS0.99987

ivanti endpoint manager sql injection exploitation urgent patch cisa active threats vulnerabilities federal agencies