← CVE Intelligence

CVE-2025-10986

Ivanti / Endpoint Manager Mobile PUBLISHED

Description (CNA)

Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to write data in unintended locations on disk.

Affected (CNA)

Vendor / productVersions
Ivanti / Endpoint Manager Mobileunaffected 12.6.0.2; unaffected 12.5.0.4; unaffected 12.4.0.4

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.