CVE-2024-29847 — Vulnerability intelligence
ivanti — endpoint manager
Published:
- CVSS
- 9.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.