Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-9872

Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User int

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Endpoint Manager

Default version status: affected

  • 2024 SU3 Security Release 1unaffected
  • 2022 SU8 Security Release 2unaffected

References