CVE-2024-34787

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to…

High · published November 13, 2024

CVSS v3.0

7.8

EPSS

18%

Percentile

97.2

In the wild

Unconfirmed

What it is

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.

The record

Technical detail

CVSS v3.0: 7.8 · HIGH
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.17775 · 97.2th percentile
Published: 2024-11-13T01:54Z

EPSS history

Timeline

13 NOV 01:54Z
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to…
cvelistv5