Security Advisory
CVE-2025-10573
9.6
CRITICAL
Vulnerability Description
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.
Published Date
December 9, 2025
Official Source
NIST NVD Advisory