CVE-2024-34784

Deeper analysis

CVE-2024-34784 is a SQL injection vulnerability in Ivanti Endpoint Manager, affecting versions prior to the 2024 November Security Update and the 2022 SU6 November Security Update. The flaw, tracked under CWE-89, carries a CVSS 3.1 base score of 7.2 and stems from insufficient input sanitization that permits malicious SQL statements to be executed in the context of an authenticated administrative session.

A remote attacker who already possesses administrative credentials can supply crafted input to trigger the injection, resulting in arbitrary code execution on the server. Because the attack requires valid admin privileges and targets the management interface over the network, it is most relevant to insiders, compromised admin accounts, or attackers who have already obtained elevated access through other means.

The referenced Ivanti security advisory directs customers to apply the November 2024 updates for both the 2024 and 2022 release streams as the primary remediation. No additional configuration changes or workarounds are specified in the available reference.

EPSS for the CVE rose from lower values to a peak of 0.1197 on 2025-12-11 before receding to the current score of 0.0778, indicating measurable post-disclosure exploitation interest that later subsided.