Description
Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| endpoint_manager | ivanti / endpoint_manager | >= 0, <= 2022_su5 | affected |
| EPM | Ivanti / EPM | >= 2022 SU5, <= 2022 SU5 | affected |