CVE-2024-34781
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
High · published November 13, 2024
Patch now
High probability of exploitation
CVSS calls it high at 7.2. It sits in the 99.3th percentile for exploit probability.
What it is
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
The record
Technical detail
- CVSS v3.0
- 7.2 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.68461 · 99.3th percentile
- Published
- 2024-11-13T01:54Z
EPSS history
Timeline