CVE-2024-50330

Critical · 9.8

CVSS

9.8

EPSS

40.3%

Published

Nov 12, 2024

CISA due date

—

The record

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed