Ivanti Releases Security Update for Vulnerability Affecting Endpoint Manager
A high severity vulnerability could allow an attacker to execute arbitary code via SQL Injection on an affected system
Summary
A high severity vulnerability could allow an attacker to execute arbitary code via SQL Injection on an affected system
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Ivanti has released a security advisory to address a high severity vulnerability affecting Ivanti Endpoint Manager (EPM). Ivanti EPM is an all-in-one solution for managing devices endpoints within a network.
The vulnerability CVE-2024-37381 has a CVSSv3 score of 8.4 and could allow an authenticated attacker within the same network to execute arbitrary code via SQL injection.
Remediation advice
Affected organisations are encouraged to review the Ivanti Security Advisory EPM July 2024 for EPM 2024 and apply the relevant update.
Definitive source of threat updates
CVE Vulnerabilities
Last edited: 17 July 2024 2:10 pm