Ivanti warns customers of new EPM flaw enabling remote code execution

Securityaffairs.Co •Pierluigi Paganini • December 9, 2025

Ivanti warns users to address a newly disclosed Endpoint Manager vulnerability that could let attackers execute code remotely. Software firm Ivanti addressed a newly disclosed vulnerability, tracked as CVE-2025-10573 (CVSS score 9.6), in its Endpoint Manager (EPM) solution. The vulnerability is a Stored XSS that could allow a remote unauthenticated attacker to execute arbitrary “Stored […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ivanti EPM Vulnerability Allows Remote Code Execution Ivanti has disclosed a critical vulnerability in its Endpoint Manager (EPM) solution, tracked as CVE-2025-10573, which has a CVSS score of 9.6. This Stored XSS vulnerability could allow remote unauthenticated attackers to execute arbitrary code. Users are advised to address this issue promptly to mitigate potential risks. 2 sources 75

Extracted Entities

Ivanti warns customers of new EPM flaw enabling remote code execution

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)

Vulnerabilities (1)