Vulnerability

CERT-In Vulnerability Note CIVN-2025-0254
Remote code execution Vulnerabilities in Ivanti Endpoint Manager

Original Issue Date:October 14, 2025

Severity Rating: HIGH

Software Affected

Ivanti Endpoint Manager 2022 SU8 Security Update 1 and prior
Ivanti Endpoint Manager 2024 SU3 and prior

Overview

Multiple vulnerabilities have been reported in Ivanti Endpoint Manager that could allow a remote attacker to execute arbitrary code on the targeted system.

Target Audience:
Individuals and end-user organizations using affected Ivanti Endpoint Manager.

Risk Assessment:
High risk of sensitive data disclosure and process disruptions.

Impact Assessment:
Potential for system compromise and service disruptions.

Description

Ivanti Endpoint Manager (EPM) is a Unified Endpoint Management (UEM) solution used to securely manage and monitor devices across platforms, including Windows, macOS, Linux, and mobile environments.

These vulnerabilities exist in Ivanti Endpoint Manager due to insufficient validation of filenames during file-handling operations. A remote, unauthenticated attacker could exploit these flaws by supplying a specially crafted filename that triggers arbitrary code execution when processed by the affected component.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:
https://forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8?language=en_US

Vendor Information

Ivanti
https://forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8?language=en_US

References

Ivanti
https://forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8?language=en_US

CVE Name
CVE-2025-9712
CVE-2025-9872

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India