CVE-2025-22458

7.8 highEPSS 0.4%

High (7.8) in ivanti endpoint manager. EPSS 0.4% chance of exploitation in the next 30 days.

DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System.

Severity

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2025-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19