An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute arbitrary code.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')