Beveiligingsadvies

CVE-2024-13162

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-14 17:23:48
Laatst bijgewerkt 2026-02-26 19:09:27
Toegewezen door ivanti
CVSS-score 7.2
Status PUBLISHED

Beschrijving

SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.