Vulnerability CVE-2024-32845


Published: 2024-09-12

Description:
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

 References:
https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022

Copyright 2026, cxsecurity.com

 

Back to Top