CVE-2025-62391: SQL Injection
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Endpoint Managerto a version that resolves this vulnerability.Fixed in 2024 SU5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62391?
CVE-2025-62391 has a high severity rating due to its potential for unauthorized data access via SQL injection.
How do I fix CVE-2025-62391?
To fix CVE-2025-62391, update your Ivanti Endpoint Manager to the latest security release that addresses the SQL injection vulnerability.
Who is affected by CVE-2025-62391?
CVE-2025-62391 affects users of Ivanti Endpoint Manager versions prior to 2024 and its subsequent security updates.
What are the implications of CVE-2025-62391?
The implications of CVE-2025-62391 include potential unauthorized access to sensitive data stored in the database.
Is CVE-2025-62391 a remote vulnerability?
Yes, CVE-2025-62391 is a remote vulnerability that can be exploited by an authenticated attacker.