CVE-2025-22461
Published: 08 April 2025
Summary
CVE-2025-22461 is a high-severity SQL Injection (CWE-89) vulnerability in Ivanti Endpoint Manager. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 20.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2025-22461 is a SQL injection vulnerability affecting Ivanti Endpoint Manager prior to version 2024 SU1 and prior to version 2022 SU7. The flaw is tracked under CWE-89 and carries a CVSS 3.1 score of 7.2, reflecting high confidentiality, integrity, and availability impact when successfully exploited over a network.
A remote attacker who already possesses authenticated administrative privileges can supply crafted input that triggers the injection, ultimately allowing arbitrary code execution on the affected system. No unauthenticated or low-privileged attack paths are described.
The referenced Ivanti security advisory directs administrators to apply the fixed releases (2024 SU1 or 2022 SU7) to eliminate the vulnerable code paths.
EPSS values for the CVE rose from a low baseline to a recorded peak of 0.0408, indicating that exploitation interest increased after public disclosure and that the issue merits renewed monitoring despite the current score of 0.0118.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-10297
Vulnerability details
SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote authenticated attacker with admin privileges to achieve code execution.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.