CVE-2024-29824

Timeline

Detection, updates, and resolution for this record.

1. May 31, 2024 · Catalog

   Detected

   An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

2. Oct 2, 2024 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Oct 23, 2024 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 17, 2026 · Catalog

   Updated

   An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Affected

• cpe ivanti/endpoint managerversion unspecified
• cpe ivanti/endpoint manager2022
• vendor Ivanti Endpoint Manager (EPM)version unspecified

Sources

• CISA KEVCVE-2024-29824

  Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.

  cisa.gov
• CVE.orgCVE-2024-29824

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2024-29824

  30-day exploitation probability 99.9%

  first.org
• Metasploit Modulesexploit_windows/http/ivanti_epm_recordgoodapp_sqli_rce

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDCVE-2024-29824

  An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

  nvd.nist.gov

References

• CISA note · forums.ivanti.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov