CVE-2025-11622
published 2025-10-13CVE-2025-11622: Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges.
PriorityP345high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.74%
49.9th percentile
Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ivanti | endpoint_manager | < 2024 | 2024 |
| ivanti | endpoint_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rqqv-ff68-qw2w: Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to escalate their privileges
ghsa_unreviewed·2025-10-13
CVE-2025-11622 [HIGH] CWE-502 GHSA-rqqv-ff68-qw2w: Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to escalate their privileges
Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to escalate their privileges.
Ivanti
Ivanti Security Advisory: CVE-2025-11622
vendor_ivanti·2025-10-13·CVSS 7.8
CVE-2025-11622 [HIGH] CWE-502 Ivanti Security Advisory: CVE-2025-11622
Ivanti Security Advisory: CVE-2025-11622
Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges.
CVE IDs: CVE-2025-11622
CVSS Base Score: 7.8
Severity: HIGH
CWEs: CWE-502
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-13
Published