Security Advisory
CVE-2024-13162
7.2
HIGH
Vulnerability Description
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.
Published Date
January 14, 2025
Official Source
NIST NVD Advisory