GCVE - cpe:2.3:a:ivanti:endpoint_manager:2022:su8:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:endpoint_manager:2022:su8:*:*:*:*:*:*

part: a version: 2022 update: su8

Vendor	Ivanti (`40b984ad-e54c-5e1b-9aa1-2a4cd4d61129`)
Product	Endpoint Manager (`006063b4-e9bc-5f0c-b4e5-d80a079df021`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9872`	vulnerable	2026-06-03 15:14:39.993234	Details available HIGH (8.8) Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. Published: 2025-09-09T15:11:13.957Z Updated: 2026-02-26T17:49:04.223Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9712`	vulnerable	2026-06-03 15:14:39.376617	Details available HIGH (8.8) Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. Published: 2025-09-09T15:09:05.375Z Updated: 2026-02-26T17:49:04.952Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7037`	vulnerable	2026-06-03 15:12:30.384106	SQL injection in Ivanti Endpoint Manager HIGH (7.2) SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the database Published: 2025-07-08T14:54:42.789Z Updated: 2025-07-08T15:07:12.721Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8?language=en_US	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6996`	vulnerable	2026-06-03 15:12:29.518933	Improper Encryption in Ivanti Endpoint Manager HIGH (8.4) Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. Published: 2025-07-08T14:51:04.446Z Updated: 2025-07-08T15:14:08.808Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6995`	vulnerable	2026-06-03 15:12:29.515069	Improper Encryption in Ivanti Endpoint Manager HIGH (8.4) Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. Published: 2025-07-08T14:45:44.989Z Updated: 2025-07-08T15:54:49.209Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.