CVE-2025-7037 in Endpoint Manager

الملخص

بحسب MITRE • 08/07/2025

SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the database

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Ivanti
• حجز: 02/07/2025
• إفشاء: 08/07/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-315397
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• CVSS: 7.2 (CNA)
• EPSS: 0.00883
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-7037
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-7037
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-7037/