Vulnerability Bulletins

CVE-2024-37381

   
Affected software IVANTI
 
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-37381