First published: Fri May 31 2024(Updated: )
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Credit: support@hackerone.com support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ivanti Endpoint Manager (EPM) | ||
Ivanti Endpoint Manager | <2022 | |
Ivanti Endpoint Manager | =2022 | |
Ivanti Endpoint Manager | =2022-su1 | |
Ivanti Endpoint Manager | =2022-su2 | |
Ivanti Endpoint Manager | =2022-su3 | |
Ivanti Endpoint Manager | =2022-su4 | |
Ivanti Endpoint Manager | =2022-su5 | |
<2022 | ||
=2022 | ||
=2022-su1 | ||
=2022-su2 | ||
=2022-su3 | ||
=2022-su4 | ||
=2022-su5 |
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.