CVE-2024-29825

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…

Critical · published May 31, 2024

Patch now

High probability of exploitation

CVSS calls it critical at 9.6. It sits in the 100.0th percentile for exploit probability.

CVSS v3.0

9.6

EPSS

100%

Percentile

100.0

In the wild

Unconfirmed

What it is

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

The record

Technical detail

CVSS v3.0: 9.6 · CRITICAL
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.99877 · 100.0th percentile
Published: 2024-05-31T17:38Z

EPSS history

Timeline

31 MAY 17:38Z
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
cvelistv5