Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Ivanti EPM allows remote code execution for attackers with admin access

CVE-2024-32842 · published 2 years ago
Summary

A security issue in Ivanti EPM allows an attacker with admin privileges to take control of the system remotely. This means they can potentially access sensitive data or disrupt the system. Ivanti has released a patch for this issue, so it's essential to update to the latest version.

What to do
  • Update ivanti endpoint_manager to version 2022 or later.
Affected software
VendorProductAffected versions
ivanti endpoint_manager < 2022
2022
2024
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Original advisory text
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
2% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published12 Sep 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-32842 · NVD
Track software like this
Free during beta