CVE-2024-29824
KEVIvanti Endpoint Manager (EPM) SQL Injection Vulnerability
Description
Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
CVSS 3.1 vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublishedMay 31, 2024
Last modifiedJun 17, 2026
Added to KEVOct 2, 2024
Remediation dueOct 23, 2024
References
- forums.ivanti.com/s/article/Security-Advisory-May-2024Vendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29824US Government Resource
0 recent articles mention this CVE
84
Risk assessment · Critical
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 735 days
- CVSS
- 8.8 HIGH
- EPSS (30-day exploit probability)
- 99.9% · top 1% of all CVEs
- Weakness
- CWE-89
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.