High severity8.0NVD Advisory· Published Jul 29, 2024· Updated Jun 17, 2026
CVE-2024-37381
CVE-2024-37381
Description
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.
Affected products
3- cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- forums.ivanti.com/s/article/Security-Advisory-EPM-July-2024-for-EPM-2024nvdVendor Advisory
News mentions
0No linked articles in our index yet.