High severity · published Apr 8, 2025
CVE-2025-22458
DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Endpoint Manager · Ivanti
before 2022; 2022; 2022; 2022; 2022; 2022; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-22458
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-22458
Vendor Advisory
https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
seclists.org
http://seclists.org/fulldisclosure/2025/May/17
More from Endpoint Manager
8.8
CVE-2024-29824
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
7.5
CVE-2026-1603
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
7.5
CVE-2024-13159
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
7.5
CVE-2024-13160
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
7.5
CVE-2024-13161
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability