← Back to browse · API

CVE-2024-13162

Severity
HIGH
CVSS
7.2
EPSS
0.64176
Risk score
51.26
CISA KEV
No
PoC
No
Published
2025-01-14
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2024-51388, GHSA-98MP-XVW5-2FCH
Products
Ivanti:Endpoint Manager patch: 2022 SU6 January-2025 Security Update, Ivanti:Endpoint Manager patch: 2024 January-2025 Security Update
Sources
euvd EUVD-2024-51388

Description

SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.

References