- Description
- Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges.
- Source
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- NVD status
- Modified
- Products
- endpoint_manager
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- CWE-502
- Hype score
- Not currently trending
【セキュリティ ニュース】Ivantiの複数製品に脆弱性 - 「EPM」の更新は11月以降：Security NEXT https://t.co/QFsR1CdXYy 『「CVE-2025-11622」を11月、のこる12件については2026年3月まで公開を延長するよう求めたが、ZDIでは受
@Syynya
22 Oct 2025
40 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Ivanti、Endpoint Managerの2件の高リスク脆弱性を含む13件の脆弱性を修正(CVE-2025-9713,CVE-2025-11622) https://t.co/CFVcdUJYSg #セキュリティ対策Lab #セキュリティ #Security
@securityLab_jp
17 Oct 2025
70 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Ivanti Endpoint Managerに13件の脆弱性。うち2件は特権昇格とRCEを可能にする高深刻度で、残り11件はSQLインジェクション。修正版は11月と2026年Q1に段階配信予定である。 CVE-2025-11622（CVSS 7.8）はローカル認証済み攻
@yousukezan
14 Oct 2025
2166 Impressions
1 Retweet
13 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2025-11622 Ivanti Endpoint Manager Local Privilege Escalation via Insecure Deserialization https://t.co/RSnOPrZ7JZ
@VulmonFeeds
13 Oct 2025
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7ABDE6FE-56CC-4A46-91F2-2F54C3EC6A75",
"versionEndExcluding": "2024",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
"matchCriteriaId": "6C7283FE-C10A-4E37-B004-15FB0CAC49A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su1:*:*:*:*:*:*",
"matchCriteriaId": "FC51EEA2-1C4C-4069-9704-7ACFE4773930",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su2:*:*:*:*:*:*",
"matchCriteriaId": "E1EF5E1B-9377-49D3-9BE3-62FC78E666A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su3:*:*:*:*:*:*",
"matchCriteriaId": "749AADDA-834D-4EC0-B7FF-E136FD1984F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su3_security_release_1:*:*:*:*:*:*",
"matchCriteriaId": "698BF7A1-62A1-45B5-BF08-AB3F3AA0245C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]