← CVE Intelligence

CVE-2025-10243

Ivanti / Endpoint Manager Mobile PUBLISHED

Description (CNA)

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected (CNA)

Vendor / productVersions
Ivanti / Endpoint Manager Mobileunaffected 12.6.0.2; unaffected 12.5.0.4; unaffected 12.4.0.4

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.