CVE-2025-22464CWE-822

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local…

Medium · published April 8, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2025-04-08T14:27Z
EPSS history
Timeline
  • 08 APR 14:27Z
    An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local…
    cvelistv5