CyberSec.Space Logo
CVEブラウザに戻る

CVE-2024-29824

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-05-31
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Affected Platforms (CPE)

📦
Ivanti

Endpoint Manager

< 2022= 2022

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-May-2024
🔗 https://forums.ivanti.com/s/article/Security-Advisory-May-2024
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29824

関連する脆弱性情報

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-400001.8

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files...

CVE-2026-658948.7

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could ex...