What is CVE-2025-22464?

CVE-2025-22464 is a medium-severity vulnerability in Ivanti Endpoint Manager, classified under Untrusted Pointer Dereference. CVSS score: 6.1/10. Published 2025-04-08.

How severe is CVE-2025-22464?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Ivanti Endpoint Manager

CVE-2025-22464

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.

EPSS: 0.003 (16.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H.

Affected products

Ivanti Endpoint Manager — versions 2024 SU1, 2022 SU7
Ivanti Endpoint_manager — versions 2022, 2024

Weakness classification (CWE)

CWE-822 — Untrusted Pointer Dereference

References

3c1d8aa1-5a33-4ea4-8992-aadd6440af75 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-22464?: CVE-2025-22464 is a medium-severity vulnerability in Ivanti Endpoint Manager, classified under Untrusted Pointer Dereference. CVSS score: 6.1/10. Published 2025-04-08.
How severe is CVE-2025-22464?: Medium severity. CVSS v3 base score is 6.1 out of 10.