CVE-2025-7037 in Endpoint Manager

Resumen

por MITRE • 2025-07-08

SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the database

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Ivanti
• Reservar: 2025-07-02
• Divulgación: 2025-07-08
• Moderación: aceptado
• Artículo: VDB-315397
• CPE: listo
• CWE: CWE-89 (confirmado)
• CVSS: 7.2 (CNA)
• EPSS: 0.00883
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-7037
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-7037
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-7037/