Boletines de Vulnerabilidades

CVE-2024-37381

   
Software afectado IVANTI
 
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-37381