CVE-2025-9872

🗓️ 09 Sep 2025 15:11:13Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 15 Views

Ivanti Endpoint Manager filename validation flaw enables remote code execution.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-9872	10 Sep 202512:50	–	circl
CNNVD	Ivanti Endpoint Manager 安全漏洞	9 Sep 202500:00	–	cnnvd
CNVD	Ivanti Endpoint Manager Code Execution Vulnerability	11 Sep 202500:00	–	cnvd
Cvelist	CVE-2025-9872	9 Sep 202515:11	–	cvelist
EUVD	EUVD-2025-27288	3 Oct 202520:07	–	euvd
Ivanti	Security Advisory September 2025 for Ivanti EPM 2024 SU3 and EPM 2022 SU8	9 Sep 202513:39	–	ivanti
NVD	CVE-2025-9872	9 Sep 202516:15	–	nvd
OSV	CVE-2025-9872	9 Sep 202516:15	–	osv
Positive Technologies	PT-2025-36744	9 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9872	11 Sep 202515:26	–	redhatcve

NVD

Vulners

Node

ivanti endpoint_managerRange<2022-

ivanti endpoint_managerMatch2022-

ivanti endpoint_managerMatch2022su1

ivanti endpoint_managerMatch2022su2

ivanti endpoint_managerMatch2022su3

ivanti endpoint_managerMatch2022su4

ivanti endpoint_managerMatch2022su5

ivanti endpoint_managerMatch2022su6

ivanti endpoint_managerMatch2022su7

ivanti endpoint_managerMatch2022su8

ivanti endpoint_managerMatch2022su8_security_release_1

ivanti endpoint_managerMatch2024-

ivanti endpoint_managerMatch2024su1

ivanti endpoint_managerMatch2024su2

[
  {
    "defaultStatus": "affected",
    "product": "Endpoint Manager",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "2024 SU3 Security Release 1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2022 SU8 Security Release 2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-September-2025-for-Ivanti-EPM-2024-SU3-and-EPM-2022-SU8

10 Oct 2025 19:24Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.8

EPSS0.02584

SSVC

CWE-434