IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.6Kritik KEV

CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

Ivanti EPM; ivanti endpoint_manager Yayım: (2 yıl önce)

Aktif olarak istismar ediliyor — Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 02.10.2024 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 23.10.2024.

Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://forums.ivanti.com/s/article/Security-Advisory-May-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29824

Açıklama

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Zayıflık türü (CWE): CWE-89

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
ivanti endpoint_manager ≤ 2022_su5
Ivanti EPM 2022 SU5 – ≤ 2022 SU5

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (7)
  • cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* < 2022
  • cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*

Aynı üründe son açıklar — Ivanti (Connect Secure, EPMM…)

4.9Orta
CVE-2026-83528
Ivanti Endpoint Manager Mobile

Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.

5.5Orta
CVE-2026-107405
Ivanti Endpoint Manager Mobile

An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.

4.9Orta
CVE-2026-107404
Ivanti Endpoint Manager Mobile

Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.

4.9Orta
CVE-2026-105427
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.

6.7Orta
CVE-2026-105426
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.

5.5Orta
CVE-2026-123181
Ivanti Sentry

A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.