Ivanti Endpoint Manager (EPM) SQL Injection ยท updates https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824 Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. Added to the CISA KEV catalog on 2024-10-02. en Wed, 02 Oct 2024 00:00:00 GMT Ivanti Endpoint Manager (EPM) SQL Injection: CISA added CVE-2024-29824 to the KEV catalog (federal deadline 2024-10-23) https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824 https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824#2024-10-02-6d502d6a Wed, 02 Oct 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Ivanti Endpoint Manager (EPM) SQL Injection: CVE-2024-29824 published https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824 https://pwn.watch/i/ivanti-endpoint-manager-epm-cve-2024-29824#2024-05-31-bd2a53d5 Fri, 31 May 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-29824">Source</a></p>