CVE-2024-37381: SQL Injection

Published Jul 29, 2024

Updated

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Affected Software

2 affected components

Ivanti EPM

Ivanti Endpoint Manager=2024

Event History

Jul 29, 2024

CVE Published

via MITRE·05:43 AM

Data Sourced

via MITRE·05:43 AM

DescriptionSeverity

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-37381?

CVE-2024-37381 is considered a critical vulnerability due to its potential to allow authenticated attackers to execute arbitrary code.

How do I fix CVE-2024-37381?

To address CVE-2024-37381, apply the latest security patches and updates provided by Ivanti for the Endpoint Manager (EPM) as soon as they are available.

Who is affected by CVE-2024-37381?

CVE-2024-37381 affects authenticated users within the same network using Ivanti Endpoint Manager (EPM) 2024.

What type of vulnerability is CVE-2024-37381?

CVE-2024-37381 is an SQL Injection vulnerability that allows for the execution of arbitrary code on the affected system.

Can CVE-2024-37381 be exploited remotely?

CVE-2024-37381 cannot be exploited remotely as it requires authentication and access to the same network.