← Back to browse · API

CVE-2024-29847

Severity
CRITICAL
CVSS
10.0
EPSS
0.52913
Risk score
58.52
CISA KEV
No
PoC
No
Published
2024-09-12
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2024-26839, GHSA-QFX3-M2XP-3PCP
Products
Ivanti:EPM 2022 SU6 <2022 SU6, Ivanti:EPM 2024 September Security Update <2024 September Security Update
Sources
euvd EUVD-2024-26839

Description

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.

References