Multiple Vulnerabilities in Ivanti Products Could Allow for Remote Code Execution

Multiple vulnerabilities have been disclosed in Ivanti products, including a critical remote code execution vulnerability (CVE-2024-37404) and numerous other issues such as SSRF, path traversal, SQL injection, command injection, NULL-pointer DoS, and local privilege escalation across Ivanti EPMM, Connect Secure, Avalanche, CSA, and Velocity License Server; successful exploitation could allow attackers to execute code, install programs, and access or modify data depending on system privileges.