CVE-2024-32839

Deeper analysis

CVE-2024-32839 is a SQL injection vulnerability, tracked under CWE-89, that affects Ivanti Endpoint Manager prior to the 2024 November Security Update or the 2022 SU6 November Security Update. The flaw carries a CVSS 3.1 base score of 7.2, reflecting network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability when successfully exploited.

A remote authenticated attacker who already possesses administrative privileges can supply crafted input to trigger the injection, resulting in arbitrary code execution on the affected server. Because the attack requires valid admin credentials and no user interaction, the primary risk stems from compromised or insider administrative accounts rather than unauthenticated external parties.

The vendor advisory at https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022 directs customers to install the November 2024 security updates for both EPM 2024 and EPM 2022 branches as the primary mitigation.

The associated EPSS score has reached a peak of 0.1284 and currently sits at 0.1155, indicating moderate but not yet elevated exploitation interest following disclosure.