CVE-2025-10986 MEDIUM

CVE-2025-10986

Weakness CWE-22 · Path traversal
Published October 14, 2025
Last update October 14, 2025
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to write data in unintended locations on disk.

Key dates

02Disclosure timeline

October 14, 2025 CVE published
October 14, 2025 Record updated