CVE-2025-13662

Katalog CVE

CVSS 7.8 · High EPSS 0,58%

Kerentanan Improper Verification of Cryptographic Signature pada ivanti endpoint manager. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary code. User Interaction is required.

Rincian

Terbit di NVD

9 Desember 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 45,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://forums.ivanti.com/s/article/Security-Advisory-EPM-December-2025-for-EPM-2024 advisory vendor