NetSight
high7.2

CVE-2025-6770

OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with high privileges to achieve re…

Impact

OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with high privileges to achieve remote code execution

Affected products

VendorProductAffected versions
IvantiEndpoint Manager Mobile
before 12.3.0.3
from 12.4.0.0 before 12.4.0.3
from 12.5.0.0 before 12.5.0.2

Weakness classification

References