CVE-2025-22461

No fix known EPSS 2%CVSS 7.2

SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote authenticated attacker with admin privileges to achieve code execution.

Published 2025-04-08 · CVE record · OSV

Products: ivanti endpoint_manager