Insecure Deserialization Vulnerability in Ivanti Endpoint Manager

CVE-2025-11622

What is CVE-2025-11622?

An insecure deserialization vulnerability in Ivanti Endpoint Manager enables a local authenticated attacker to exploit the system, potentially leading to privilege escalation. This weakness allows attackers to modify serialized data, which can then be deserialized without proper validation, granting unauthorized access or additional rights within the application.

References