CVE-2025-9872

Description

References

• forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8 · Vendor Advisory

Weitere Schwachstellen in endpoint manager

• CVE-2026-8111HOCH 8.8SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote…
• CVE-2026-8110HOCH 7.8Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to es…
• CVE-2026-8109MITTEL 6.5An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to …
• CVE-2026-1603HOCH 7.5EXPLOITED (CISA KEV)An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored…
• CVE-2026-1602MITTEL 6.5SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data…