Ivanti Endpoint Manager
Moderate fix2 remedies
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*
Moderate fix2 remedies
- <= 2022 SU6
- <= 2024
Ivanti Endpoint Manager Reflected Cross-Site Scripting Vulnerability
Vulnerability
Patched
A reflected cross-site scripting vulnerability has been identified in Ivanti Endpoint Manager versions prior to 2024 SU1 and 2022 SU7. This vulnerability allows remote, unauthenticated attackers to execute arbitrary JavaScript in the context of the victim's browser, with only minimal user interaction required.
Impact
Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious scripts in the context of the user's browser session.
Remediation
Users can upgrade to Ivanti Endpoint Manager 2024 SU2 or 2022 SU8 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.7exploitability
6.0remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.