SQL Injection Vulnerability in Ivanti Endpoint Manager

CVE-2025-62384

What is CVE-2025-62384?

A SQL injection vulnerability exists in Ivanti Endpoint Manager that enables a remote authenticated attacker to execute malicious SQL queries. This exploitation could potentially allow unauthorized reading of sensitive data from the application's database. Organizations using Ivanti Endpoint Manager should promptly apply necessary patches and take measures to mitigate risks associated with this vulnerability.

References