CVE-2024-50326

High · 7.2

CVSS

7.2

EPSS

26.5%

Published

Nov 12, 2024

CISA due date

—

The record

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed