CVE-2024-34785

Deeper analysis

CVE-2024-34785 is an unspecified SQL injection vulnerability, tracked as CWE-89, that affects Ivanti Endpoint Manager (EPM) prior to the 2022 SU6 release or the September 2024 update. The flaw carries a CVSS 3.1 base score of 7.2, reflecting network-accessible attack vectors that require high privileges but impose no user interaction or scope change.

A remote authenticated attacker holding administrative privileges can supply crafted input that triggers the injection, resulting in arbitrary code execution on the affected EPM server. Because the attacker must already possess admin credentials, the issue is primarily a privilege-escalation path from administrative console access rather than an unauthenticated entry point.

The vendor advisory at https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022 directs customers to apply the September 2024 update or 2022 SU6, which remediates the injection condition.

EPSS for the CVE rose from lower values to a peak of 0.5006 on 2025-12-11 before receding to the current 0.3813, indicating measurable post-disclosure exploitation interest that warrants continued monitoring.