CVE-2024-8191

Critical · 9.8

CVSS

9.8

EPSS

20.3%

Published

Sep 10, 2024

CISA due date

—

The record

SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed