CVE-2025-13659

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

December 9, 2025

Last Seen

December 10, 2025

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching45.3

Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code, affecting users and administrators of the impacted versions. Immediate updates are adv...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

Dec 10·6 sources

Related Articles (4)

Hundreds of Ivanti EPM systems exposed online as critical flaw patched

Csoonline·Dec 10

Ivanti Patches Critical Security Vulnerability in Endpoint Manager

Heise.De·Dec 10

Ivanti patches Endpoint Manager flaw allowing remote code execution

Computing·Dec 10

Ivanti warns of critical Endpoint Manager code execution flaw

Bleepingcomputer·Dec 9

Related Entities

Cross-site Scripting Data Breach Malware Ransomware Stored Cross-Site Scripting Ivanti United States Germany Japan Ivanti Endpoint Manager FortiCare FortiOS