SQL Injection Vulnerability in Ivanti Endpoint Manager by Ivanti

CVE-2025-62386

What is CVE-2025-62386?

A SQL injection vulnerability exists in Ivanti Endpoint Manager that enables a remote authenticated attacker to execute unauthorized SQL commands. This flaw allows the attacker to retrieve arbitrary data from the database, potentially exposing sensitive information. Users of Ivanti Endpoint Manager should take immediate action to mitigate this risk and ensure their systems remain secure.

References