cbcvebase.
CVE-2024-8191
published 2024-09-10

CVE-2024-8191: SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote…

PriorityP277critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
19.56%
97.0th percentile
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.

Affected

3 ranges
VendorProductVersion rangeFixed in
ivantiendpoint_manager< 20222022
ivantiendpoint_manager——
ivantiendpoint_manager——

Detection & IOCsextracted from sources · hover to see the quote

  • →SQL injection vulnerability in the Ivanti EPM management console allows remote unauthenticated RCE; monitor for anomalous/unsanitized SQL query patterns targeting the EPM management console endpoint ↗
  • →Attack is unauthenticated and remote — no credentials required; prioritize perimeter-level detection and alerting on management console access from untrusted/external sources ↗
  • ·Vulnerability affects Ivanti EPM versions before 2022 SU6 and before the 2024 September update; ensure version checks target these specific release boundaries ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.