Executive Risk Summary
"A remote unauthenticated attacker can achieve remote code execution in Ivanti EPM before 2022 SU6 or the 2024 September update due to deserialization of untrusted data. This vulnerability poses a significant risk to the security and integrity of the affected systems."
Operational Audit Arsenal
Target Type Web Application
Target Asset Ivanti EPM Agent Portal
Standard Path Global Web Interface
Manual Verification Required
This is a non-Windows asset (Ivanti). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Moderate
Internal Work Notes
Apply Ivanti EPM 2022 SU6 or the 2024 September update to mitigate remote code execution vulnerability (CVE-2024-29847) in the agent portal.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Ivanti Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.