Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-46806 EUVD-2023-50972GHSA-7rp9-cgvf-834p

An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege …

Published May 22, 2024 · Updated Aug 2, 2024 · Assigned by hackerone

Description

An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.

Affected products

VendorProductAffectedFixed
Ivanti EPMM 12.1.0.0 – < 12.1.0.0 12.1.0.0

Advisories 1

References