CVE-2024-29827

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…

Critical · published May 31, 2024

Patch now

High probability of exploitation

CVSS calls it critical at 9.6. It sits in the 99.4th percentile for exploit probability.

CVSS v3.0

9.6

EPSS

72%

Percentile

99.4

In the wild

Unconfirmed

What it is

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

The record

Technical detail

CVSS v3.0: 9.6 · CRITICAL
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.71685 · 99.4th percentile
Published: 2024-05-31T17:38Z

EPSS history

Timeline

31 MAY 17:38Z
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
cvelistv5