Unauthenticated SQL Injection Vulnerability Affects Ivanti EPM

CVE-2024-29827

What is CVE-2024-29827?

An unspecified SQL injection vulnerability exists in the Core server of Ivanti EPM versions 2022 SU5 and earlier. This flaw allows unauthenticated attackers within the same network environment to execute arbitrary code, potentially compromising the integrity and confidentiality of the affected system. Organizations using Ivanti EPM should assess their exposure to this vulnerability and take appropriate measures to protect their network.

References