CVE-2024-37381

No fix known EPSS 3%CVSS 8.4

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Published 2024-07-29 · CVE record · OSV

Products: Ivanti EPM, ivanti endpoint_manager