CVE-2025-22459

Medium

Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote…

ivanti·CWE-296·Published 2025-04-08

CVSS

4.8

EPSS

0.00

KEV

Exploits

cve.orgen

208 chars

Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to intercept limited traffic between clients and servers.

NVDen

208 chars

NVDes

234 chars

La validación incorrecta de certificados en Ivanti Endpoint Manager anterior a la versión 2024 SU1 o anterior a la versión 2022 SU7 permite que un atacante remoto no autenticado intercepte tráfico limitado entre clientes y servidores.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	4.8	2.2	2.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
3.1	Primary	cve.org	4.8	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N