Medium WID-SEC-2025-2305 4 CVEs

Ivanti Endpoint Manager (Admin Panel): Mehrere Schwachstellen

Published Oct 14, 2025 · Updated Oct 16, 2025 · Revision 2 · de-DE

Vendor: ivanti Product: Endpoint Manager Mobile Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen und Daten zu manipulieren.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 4

High 7.2

CVE-2025-10242 EPSS 21%

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …

ivanti Endpoint Manager Mobile Network devices

Oct 14, 2025
High 7.2

CVE-2025-10243 EPSS 21%

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …

ivanti Endpoint Manager Mobile Network devices

Oct 14, 2025
High 7.2

CVE-2025-10985 EPSS 21%

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …

ivanti Endpoint Manager Mobile Network devices

Oct 14, 2025
Medium 4.7

CVE-2025-10986

Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authen…

ivanti Endpoint Manager Mobile Network devices

Oct 14, 2025

Revision history

2025-10-16 #2
Produktzuordnung korrigiert
2025-10-14 #1
Initiale Fassung

References

Ivanti Security Advisory Endpoint Manager Mobile vom 2025-10-14
https://forums.ivanti.com/s/article/Security-Advisory-Endpoint-Manager-Mobile-EPMM-10-2025-Multiple-CVEs?language=en_US