PT-2025-15439
CVE-2025-22465
·
Published
2025-04-08
·
Updated
2025-04-09
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Ivanti Endpoint Manager versions prior to 2024 SU1
Ivanti Endpoint Manager versions prior to 2022 SU7
Description:
The issue allows a remote unauthenticated attacker to execute arbitrary javascript in a victim's browser. User interaction is required, although it is unlikely.
Recommendations:
For versions prior to 2024 SU1, update to version 2024 SU1 or later.
For versions prior to 2022 SU7, update to version 2022 SU7 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾