CVE-2023-28324

2023-06-3023:40:19

hackerone

www.cve.org

ivanti endpoint manager

input validation

privilege escalation

remote code execution

AI Score

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "Ivanti Endpoint Manager",
    "versions": [
      {
        "version": "2022",
        "status": "affected",
        "lessThanOrEqual": "2022",
        "versionType": "semver"
      }
    ]
  }
]