Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen und seine Privilegien zu erweitern.
Product
Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.
Vulnerabilities 13
-
High 8.8CVE-2025-9713 EPSS 16%
Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve r…
-
High 7.8
Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to es…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
-
Medium 6.5
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…
Revision history
-
#3
Neue Updates von Ivanti aufgenommen
-
#2
Referenzen ergänzt, Text und Bewertung angepasst
-
#1
Initiale Fassung
References
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-935/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-936/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-937/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-938/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-939/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-940/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-941/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-942/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-943/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-944/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-945/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-946/
-
ZDI Advisory vom 2025-10-12
https://www.zerodayinitiative.com/advisories/ZDI-25-947/
-
Ivanti Artikel vom 2025-10-12
https://forums.ivanti.com/s/article/ZDI-Ivanti-Zero-Days?language=en_US
-
Security Advisory Ivanti Endpoint Manager (EPM) October 2025 vom 2025-10-13
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
-
Ivanti Security Advisory EPM November 2025 for EPM 2024 vom 2025-11-11
https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2025-for-EPM-2024?language=en_US