VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2024· Updated Nov 19, 2024

CVE-2024-50327

CVE-2024-50327

Description

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected products

2
  • Ivanti/Endpoint Manager Mobilellm-fuzzy2 versions
    before 2024 November Security Update or before 2022 SU6 November Security Update+ 1 more
    • (no CPE)range: before 2024 November Security Update or before 2022 SU6 November Security Update
    • (no CPE)range: 2024 November Security Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.