We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Reserved 2024-03-20 | Published 2024-05-31 | Updated 2024-11-05 | Assigner hackeroneDate added 2024-10-02 | Due date 2024-10-23
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
forums.ivanti.com/s/article/Security-Advisory-May-2024
Support options
