← Back to browse · API

CVE-2024-34781

Severity
HIGH
CVSS
7.2
EPSS
0.67711
Risk score
52.5
CISA KEV
No
PoC
No
Published
2024-11-13
Modified
2024-11-19
First seen
2026-08-07
Aliases
EUVD-2024-35047, GHSA-5G36-2X7R-J898
Products
Ivanti:EPM 2022 SU6 November Security Update <2022 SU6 November Security Update, Ivanti:EPM 2024 November Security Update <2024 November Security Update
Sources
euvd EUVD-2024-35047

Description

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

References