Skip to content
OpenAdvisories
High WID-SEC-2025-1498 3 CVEs

Ivanti Endpoint Manager: Mehrere Schwachstellen

Published Jul 8, 2025 · Updated Jul 8, 2025 · de-DE

Vendor: ivanti Product: Endpoint Manager Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten offenzulegen.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 3

  • High 8.4
    CVE-2025-6995

    Improper Encryption in Ivanti Endpoint Manager

    Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords.

    ivanti Endpoint Manager Network devices
  • High 8.4
    CVE-2025-6996

    Improper Encryption in Ivanti Endpoint Manager

    Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords.

    ivanti Endpoint Manager Network devices
  • High 7.2
    CVE-2025-7037

    SQL injection in Ivanti Endpoint Manager

    SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the database

    ivanti Endpoint Manager Network devices

Revision history

  1. #1

    Initiale Fassung

References