GCVE-110-NCSC-2025-120

Advisory PublishedCVSS 8.2/10

Vulnetix · Advisory published April 9, 2025

Ivanti heeft kwetsbaarheden verholpen in Ivanti Endpoint Manager (Specifiek voor versies vóór 2024 SU1 en 2022 SU7).

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-822Untrusted Pointer DereferenceCWE-427Uncontrolled Search Path ElementCWE-296Improper Following of a Certificate's Chain of TrustCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Risk Scores

CVSS 3.1

8.2/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
Ivanti	vers:unknown/2024su1	—	—
Ivanti	vers:unknown/2022su7	—	—

Aliases

CVE-2025-22458 CVE-2025-22459 CVE-2025-22461 CVE-2025-22464 CVE-2025-22465 CVE-2025-22466

References

advisory

Browse GCVE Records

75,190 records in the GCVE database · Updated July 29, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON