CVE-2024-29847

No fix known EPSS 53%CVSS 10.0

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.