SQL Injection Vulnerability in Ivanti Endpoint Manager by Ivanti

CVE-2025-62390

What is CVE-2025-62390?

A security vulnerability has been identified in Ivanti Endpoint Manager that allows a remote authenticated attacker to execute SQL injection attacks. By exploiting this vulnerability, the attacker could gain unauthorized access to read sensitive and arbitrary data from the database, posing significant risks to organizational data integrity and confidentiality. Organizations using Ivanti Endpoint Manager are advised to monitor for signs of exploitation and implement mitigations to safeguard their systems.

References