VYPR
Unrated severityNVD Advisory· Published Nov 12, 2024· Updated Nov 19, 2024

CVE-2024-50330

CVE-2024-50330

Description

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.

Affected products

2
  • Ivanti/Endpoint Manager Mobilellm-fuzzy2 versions
    < November 2024 Security Update (2024) or < 2022 SU6 November Security Update+ 1 more
    • (no CPE)range: < November 2024 Security Update (2024) or < 2022 SU6 November Security Update
    • (no CPE)range: 2024 November Security Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.