CVE-2024-37381: Ivanti Endpoint Manager

High severity, CVSS 8.0. EPSS: 3.1% chance of exploitation in the next 30 days.

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.

Affected products

• Ivanti Endpoint Manager: version 2024 only

Published 2024-07-29. Last modified 2026-06-17.