SQL Injection Vulnerability in Ivanti Endpoint Manager

CVE-2025-62389

What is CVE-2025-62389?

A security vulnerability exists within Ivanti Endpoint Manager that exposes the application to SQL injection attacks. This flaw allows remote authenticated attackers to manipulate database queries, potentially enabling them to read arbitrary data from the underlying database. It is crucial for users of Ivanti Endpoint Manager to apply recommended security measures and updates to mitigate the risks associated with this vulnerability.

References