CVE-2025-10573

creationtimestamp| type| source ---|---|--- 2025-12-09 17:32:08+00:00| seen| https://bsky.app/profile/rapid7.com/post/3m7l376phks2e 2025-12-09 20:00:36+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3m7ldipcpad2b 2025-12-10 06:03:01+00:00| seen|...

CVE-2025-10573

Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required...