CVE-2025-6771 - OS command injection in Ivanti Endpoint Manager

Back Back to CVE browser

HIGH

OS command injection in Ivanti Endpoint Manager

Published Jul 8, 2025

7.2

HIGH

CVSS 3.1

EPSS 19.96%

Description

OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve remote code execution

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2025-6770-CVE-2025-6771?language=en_US
Vendor Advisory

Link	Providers	Tags
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2025-6770-CVE-2025-6771?language=en_US		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ivanti

Published Jul 8, 2025

Updated Jul 9, 2025

Reserved Jun 27, 2025

Link CVE-2025-6771

CISA Vulnrichment

Updated Jul 9, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-6771

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-6771