SQL Injection Vulnerability in Ivanti Endpoint Manager

CVE-2024-50326

Summary

A SQL injection vulnerability exists within Ivanti Endpoint Manager versions prior to the November 2024 Security Update and the November 2022 SU6 Security Update. This vulnerability can be exploited by remote authenticated attackers possessing administrative privileges, enabling them to perform remote code execution. The flaw impacts the integrity and security of applications that rely on Ivanti Endpoint Manager for system management, posing significant risks to user data and operational continuity. Organizations using this software must apply the necessary updates to mitigate potential threats.

References