Is CVE-2024-29824 actively exploited?

CVE-2024-29824 has no public evidence of in-the-wild exploitation as of 2025-10-30.

What is the CVSS score for CVE-2024-29824?

CVE-2024-29824 has a CVSS score of 8.8 (HIGH severity). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2024-29824?

Patch guidance is available from ivanti security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-29824.

Fix CVE-2024-29824 - HIGH ivanti endpoint manager

Q: Which products are affected by CVE-2024-29824?

7 products: ivanti endpoint manager, ivanti endpoint manager, ivanti endpoint manager, ivanti endpoint manager, ivanti endpoint manager, and 2 more.

Description

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

CVSS Metrics

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: adjacent network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-89 · SQL Injection CWE-89 · SQL Injection

Metadata

Primary Vendor: IVANTI
Published: 5/31/2024
Last Modified: 10/30/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ivanti : endpoint_managerivanti : endpoint_managerivanti : endpoint_managerivanti : endpoint_managerivanti : endpoint_managerivanti : endpoint_managerivanti : endpoint_manager

Remediation Guidance

Executive Summary

View on NIST NVD