Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-37381

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Published

2024-07-29T06:15:01.827

Last Modified

2025-07-10T18:40:11.813

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ivanti	endpoint_manager	2024	Yes

References

https://forums.ivanti.com/s/article/Security-Advisory-EPM-July-2024-for-EPM-2024 Vendor Advisory ([email protected])
https://forums.ivanti.com/s/article/Security-Advisory-EPM-July-2024-for-EPM-2024 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)