Stored XSS Vulnerability in Ivanti Endpoint Manager by Ivanti
CVE-2025-10573

9.6CRITICAL

Key Information:

Vendor: Ivanti
Status: Endpoint Manager
Vendor: CVE Published:; 9 December 2025

Badges

📈 Score: 715👾 Exploit Exists📰 News Worthy

What is CVE-2025-10573?

CVE-2025-10573 is a stored cross-site scripting (XSS) vulnerability found in Ivanti Endpoint Manager, a solution designed to manage and secure endpoints within an organization's IT infrastructure. This vulnerability allows a remote attacker to execute arbitrary JavaScript code within the context of an administrator session. Since the vulnerability requires user interaction, it can be exploited by tricking an administrator into clicking a malicious link or viewing a modified webpage. If successfully exploited, this vulnerability can lead to significant security risks for organizations, including unauthorized access to sensitive data, manipulation of application functionality, and potential compromise of the affected systems.

Potential impact of CVE-2025-10573

Unauthorized Access: The vulnerability allows attackers to run scripts in the context of an administrator session, which could lead to unauthorized access to configuration settings and sensitive information, posing a risk to organizational data integrity.
Data Manipulation: An attacker could exploit this vulnerability to modify how applications operate, potentially leading to the manipulation of critical data within the endpoint management system, disrupting operational procedures.
Increased Attack Surface: By exploiting this vulnerability, threat actors could deploy further attacks, potentially facilitating more severe breaches or the installation of malware, extending the organization's exposure to threats.

Affected Version(s)

Endpoint Manager 2024 SU4 SR1

News Articles

Red Hot Cyber

CVE-2025-10573 CVE-2025-13659

Ivanti Endpoint Manager Vulnerabilities: Update Now to Prevent RCE

Ivanti EPM has critical vulnerabilities, including a 9.6 CVSS XSS flaw. Update now to prevent remote code execution and session hijacking. Learn more.

17 hours ago