CVE-2025-62389: SQL Injection
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62389?
CVE-2025-62389 is a critical vulnerability that allows remote authenticated attackers to read arbitrary data from the database due to SQL injection.
How do I fix CVE-2025-62389?
To fix CVE-2025-62389, update Ivanti Endpoint Manager to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-62389?
CVE-2025-62389 affects all versions of Ivanti Endpoint Manager up to and including 2024 and its subsequent updates.
What type of attacks does CVE-2025-62389 allow?
CVE-2025-62389 allows attackers to perform SQL injection attacks, which can lead to unauthorized data access.
Is there a workaround for CVE-2025-62389 while waiting for a patch?
There are no official workarounds for CVE-2025-62389, and it is recommended to update the affected software as soon as possible.