Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ity is fixed in 25.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-86rg-8hc8-v82p - https://github.com/librenms/librenms/commit/30d3dd7e5f5e22a8c23c9db3ad90a731c005b008
CVE ID: CVE-2025-62366 State: PUBLISHED Published: 2025-10-14T15:23:47.600Z Last Updated: 2025-10-14T16:07:42.468Z Vendors: eladnava Products: mailgen Problem Types: CWE-79 Description: mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.30 contain an HTML injection vulnerability in plaintext emails produced by the generatePlaintext method when user‑generated content is supplied. The function attempts to remove HTML tags, but if tags are provided as encoded HTML entities they are not removed and are later decoded, resulting in active HTML (for example an img tag with an event handler) in the supposed plaintext outpu
e later decoded, resulting in active HTML (for example an img tag with an event handler) in the supposed plaintext output. In contexts where the generated plaintext string is subsequently rendered as HTML, this can allow execution of attacker‑controlled JavaScript. Versions 2.0.31 and later contain a fix. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eladnava/mailgen/security/advisories/GHSA-xw6r-chmh-vpmj - https://github.com/eladnava/mailgen/commit/7279a983481d05c51aa451e86146f98aaa42fee9
CVE ID: CVE-2025-62367 State: PUBLISHED Published: 2025-10-28T20:06:51.497Z Last Updated: 2025-10-28T20:17:55.146Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: taigaio Products: taiga-back Problem Types: CWE-89 Description: Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taigaio/taiga-back/security/advisories/GHSA-chm9-9wwq-xffj
CVE ID: CVE-2025-62368 State: PUBLISHED Published: 2025-10-28T20:08:29.569Z Last Updated: 2025-10-29T17:35:40.840Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: taigaio Products: taiga-back Problem Types: CWE-502 Description: Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taigaio/taiga-back/security/advisories/GHSA-cpcf-9276-fwc5
CVE ID: CVE-2025-62369 State: PUBLISHED Published: 2025-11-04T21:18:38.880Z Last Updated: 2025-11-05T14:29:33.887Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: xibosignage Products: xibo-cms Problem Types: CWE-94, CWE-1336 Description: Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System -> Add/Edit custom modules and templates" permissions to manipulate Twig filters and execute arbitrary server-side functions as the web server user. This issue is
ermissions to manipulate Twig filters and execute arbitrary server-side functions as the web server user. This issue is fixed in version 4.3.1. To workaround this issue, use the 4.1 and 4.2 patch commits. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-7rmm-689c-gjgv - https://github.com/xibosignage/xibo-cms/commit/0f4e88396111ea027785a48dd8f5eeb14536bd71 - https://github.com/xibosignage/xibo-cms/commit/ecd4f9d2cea739a46756a108a839cac80f65cf10 - https://github.com/xibosignage/xibo-cms/releases/tag/4.3.1 - https://patch-diff.githubusercontent.com/raw/xibosignage/xibo-cms/pull/3128.patch
CVE ID: CVE-2025-62370 State: PUBLISHED Published: 2025-10-15T15:32:17.686Z Last Updated: 2025-10-15T17:23:13.068Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: alloy-rs Products: core Problem Types: CWE-248 Description: Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloy_dyn_abi::TypedData could lead to a denial-of-service (DoS) via eip712_signing_hash(). Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially mitigate the availability issues unless repeated a
mpacted. If in use, external auto-restarting mechanisms can partially mitigate the availability issues unless repeated attacks are possible. The vulnerability was patched by adding a check to ensure the element is not empty before accessing its first element; an error is returned if it is empty. The fix is included in version v1.4.1 and backported to v0.8.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alloy-rs/core/security/advisories/GHSA-pgp9-98jm-wwq2 - https://github.com/alloy-rs/core/commit/7823e9af8c20e9fcfb5360f5eafd891c457ebccf - https://crates.io/crates/alloy-dyn-abi/0.8.26 - https://crates.io/crates/alloy-dyn-abi/1.4.1 - https://rustsec.org/
cf - https://crates.io/crates/alloy-dyn-abi/0.8.26 - https://crates.io/crates/alloy-dyn-abi/1.4.1 - https://rustsec.org/advisories/RUSTSEC-2025-0073.html
CVE ID: CVE-2025-62371 State: PUBLISHED Published: 2025-10-15T17:25:43.428Z Last Updated: 2025-10-15T18:13:42.168Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: opensearch-project Products: data-prepper Problem Types: CWE-295 Description: OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugins would automatically use a trust all SSL strategy when connecting to OpenSearch clusters if no certificate path was explicitly co
tomatically use a trust all SSL strategy when connecting to OpenSearch clusters if no certificate path was explicitly configured. This behavior bypasses SSL certificate validation, potentially allowing attackers to intercept and modify data in transit through man-in-the-middle attacks. The vulnerability affects connections to OpenSearch when the cert parameter is not explicitly provided. This issue has been patched in version 2.12.2. As a workaround, users can add the cert parameter to their OpenSearch sink or source configuration with the path to the cluster's CA certificate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opensearch-project/data-prepper/
te. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opensearch-project/data-prepper/security/advisories/GHSA-43ff-rr26-8hx4 - https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99 - https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599 - https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56
CVE ID: CVE-2025-62372 State: PUBLISHED Published: 2025-11-21T01:22:37.121Z Last Updated: 2025-11-24T18:11:59.207Z Vendors: vllm-project Products: vllm Problem Types: CWE-129 Description: vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). This issue has been patched in version 0.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gi
is issue has been patched in version 0.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-pmqf-x6x8-p7qw - https://github.com/vllm-project/vllm/pull/27204 - https://github.com/vllm-project/vllm/pull/6613 - https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b
CVE ID: CVE-2025-62374 State: PUBLISHED Published: 2025-10-14T20:06:43.697Z Last Updated: 2025-10-14T20:29:30.809Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L) Vendors: parse-community Products: Parse-SDK-JS Problem Types: CWE-1321 Description: Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0, injection of malicious payload allows attacker to remotely execute arbitrary code. ParseObject.fromJSON, ParseObject.pin, ParseObject.registerSubclass, ObjectStateMutations (internal), and encode/decode (internal) are affected. This vulnerability is fixed in 7.0.0. Additional Analyst Notes: - CISA ADP Vulnrich
code/decode (internal) are affected. This vulnerability is fixed in 7.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/parse-community/Parse-SDK-JS/security/advisories/GHSA-9f2h-7v79-mxw3 - https://github.com/parse-community/Parse-SDK-JS/pull/2749 - https://github.com/parse-community/Parse-SDK-JS/commit/00973987f361368659c0c4dbf669f3897520b132 - https://github.com/parse-community/Parse-SDK-JS/releases/tag/7.0.0-alpha.1
CVE ID: CVE-2025-62375 State: PUBLISHED Published: 2025-10-15T19:23:24.916Z Last Updated: 2025-10-15T19:44:29.097Z Vendors: in-toto Products: go-witness Problem Types: CWE-295 Description: go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is empty, and when RSA signature verification fails. The attestor also embeds a single legacy global AWS public certificate and does not account for newer region specific certificates issued in 2024, making detection o
al AWS public certificate and does not account for newer region specific certificates issued in 2024, making detection of forged documents difficult without additional trusted region data. An attacker able to supply or intercept instance identity document data (such as through Instance Metadata Service impersonation) can cause a forged identity document to be accepted, leading to incorrect trust decisions based on the attestation. This is fixed in go-witness 0.9.1 and witness 0.10.1. As a workaround, manually verify the included identity document, signature, and public key with standard tools (for example openssl) following AWS’s verification guidance, or disable use of the AWS attestor unti
with standard tools (for example openssl) following AWS’s verification guidance, or disable use of the AWS attestor until upgraded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/in-toto/go-witness/security/advisories/GHSA-72c7-4g63-hpw5 - https://github.com/in-toto/go-witness/commit/04ff20b600e28ce8fd1aa287534dd383a1cfefb9
CVE ID: CVE-2025-62376 State: PUBLISHED Published: 2025-10-14T21:58:27.439Z Last Updated: 2025-10-15T20:11:42.174Z Vendors: pwncollege Products: dojo Problem Types: CWE-287 Description: pwn.college DOJO is an education platform for learning cybersecurity. In versions up to and including commit 781d91157cfc234a434d0bab45cbcf97894c642e, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The vulnerability occurs in the view_desktop function where the user is retrieved via a URL parameter without verifying that the requester has administrative privileges. An attacker can supply any user I
ia a URL parameter without verifying that the requester has administrative privileges. An attacker can supply any user ID and arbitrary password in the request parameters to impersonate another user. When requesting a Windows desktop service, the function does not validate the supplied password before generating access credentials, allowing the attacker to obtain an iframe source URL that grants full access to the target user's Windows VM. This impacts all users with active Windows VMs, as an attacker can access and modify data on the Windows machine and in the home directory of the associated Linux machine via the Z: drive. This issue has been patched in commit 467db0b9ea0d9a929dc89b41f6eb5
ry of the associated Linux machine via the Z: drive. This issue has been patched in commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pwncollege/dojo/security/advisories/GHSA-344w-77p7-gx2c - https://github.com/pwncollege/dojo/commit/467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef
CVE ID: CVE-2025-62378 State: PUBLISHED Published: 2025-10-15T17:02:02.073Z Last Updated: 2025-10-15T17:13:21.693Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: underctrl-io Products: commandkit Problem Types: CWE-706 Description: CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical co
n a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical command name. This occurs in both middleware functions and within the command's own run function. Although not explicitly documented, CommandKit's examples and guidance around middleware usage implicitly convey that ctx.commandName represents the canonical command identifier. Middleware examples in the documentation consistently use ctx.commandName to reference the command being executed. Developers who assume ctx.commandName is canonical may introduce unintended behavior when relying on it for logic such as permission checks, rate limiting, or audit logging. This could allow
ended behavior when relying on it for logic such as permission checks, rate limiting, or audit logging. This could allow unauthorized command execution or inaccurate access control decisions. Slash commands and context menu commands are not affected. This issue has been patched in version 1.2.0-rc.12, where ctx.commandName now consistently returns the actual canonical command name regardless of the alias used to invoke it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/underctrl-io/commandkit/security/advisories/GHSA-fhwm-pc6r-4h2f
CVE ID: CVE-2025-62379 State: PUBLISHED Published: 2025-10-15T15:57:57.208Z Last Updated: 2025-10-15T17:18:15.450Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: reflex-dev Products: reflex Problem Types: CWE-601 Description: Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirect_to query parameter value directly to client-side links without any validation and triggers automatic clicks when the page loads in a GitHub Codespaces environment. This allows attackers to redirect users to arbitrary external URLs. The vulnerable route is only registered when a
ent. This allows attackers to redirect users to arbitrary external URLs. The vulnerable route is only registered when a Codespaces environment is detected, and the detection is controlled by environment variables. The same behavior can be activated in production if the GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN environment variable is set. The vulnerability occurs because the code assigns the redirect_to query parameter directly to a.href without any validation and immediately triggers a click (automatic navigation), allowing users to be sent to arbitrary external domains. The execution condition is based on the presence of a sessionStorage flag, meaning it triggers immediately on first visits
e execution condition is based on the presence of a sessionStorage flag, meaning it triggers immediately on first visits or in incognito/private browsing windows, with no server-side origin/scheme whitelist or internal path enforcement defenses in place. This issue has been patched in version 0.8.15. As a workaround, users can ensure that GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN is not set in a production environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/reflex-dev/reflex/security/advisories/GHSA-rfh5-c9h5-q8jm - https://github.com/reflex-dev/reflex/commit/ade12549f3c0ddab3d7382c581bc04a3c1f989ec
CVE ID: CVE-2025-62380 State: PUBLISHED Published: 2025-10-15T16:52:39.407Z Last Updated: 2025-10-15T17:15:16.972Z Vendors: eladnava Products: mailgen Problem Types: CWE-79 Description: mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.31 contain an HTML injection vulnerability in plaintext emails generated with the generatePlaintext method when user generated content is supplied. The plaintext generation code attempts to strip HTML tags using a regular expression and then decodes HTML entities, but tags that include certain Unicode line separator characters are not matched and removed. These encoded tags are late
but tags that include certain Unicode line separator characters are not matched and removed. These encoded tags are later decoded into valid HTML content, allowing unexpected HTML to remain in output intended to be plaintext. Projects are affected if they call Mailgen.generatePlaintext with untrusted input and then render or otherwise process the returned string in a context where HTML is interpreted. This can lead to execution of attacker supplied script in the victim’s browser. Version 2.0.32 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eladnava/mailgen/security/advisories/GHSA-q4w9-x3rv-4c8j - https://github.com/eladnava/mailgen/comm
- https://github.com/eladnava/mailgen/security/advisories/GHSA-q4w9-x3rv-4c8j - https://github.com/eladnava/mailgen/commit/7a791a424ff3a3f7783f8750919f1e98639924a8
CVE ID: CVE-2025-62381 State: PUBLISHED Published: 2025-10-15T17:12:47.357Z Last Updated: 2025-10-15T19:50:48.901Z Vendors: ciscoheat Products: sveltekit-superforms Problem Types: CWE-1321 Description: sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to a prototype pollution vulnerability within the parseFormData function of formData.js. An attacker can inject string and array properties into Object.prototype, leading to denial of service, type confusion, and potential remote code execution in downstream applications that rely on polluted objects. This vulnerability is fixed in 2.27.4. Additional Analyst Notes: - CISA ADP Vu
plications that rely on polluted objects. This vulnerability is fixed in 2.27.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ciscoheat/sveltekit-superforms/security/advisories/GHSA-hwmc-4c8j-xxj7 - https://github.com/ciscoheat/sveltekit-superforms/commit/4a1310dd1a94176bb22036662c530dad48059ca4
CVE ID: CVE-2025-62382 State: PUBLISHED Published: 2025-10-15T17:07:56.413Z Last Updated: 2025-10-17T20:58:33.347Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: blakeblackshear Products: frigate Problem Types: CWE-73 Description: Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.2, Frigate's export workflow allows an authenticated operator to nominate any filesystem location as the thumbnail source for a video export. Because that path is copied verbatim into the publicly served clips directory, the feature can be abused to read arbitrary files that reside on the host running Frigate. In practice, a
ps directory, the feature can be abused to read arbitrary files that reside on the host running Frigate. In practice, a low-privilege user with API access can pivot from viewing camera footage to exfiltrating sensitive configuration files, secrets, or user data from the appliance itself. This behavior violates the principle of least privilege for the export subsystem and turns a convenience feature into a direct information disclosure vector, with exploitation hinging on a short race window while the background exporter copies the chosen file into place before cleanup runs. This vulnerability is fixed in 0.16.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.
This vulnerability is fixed in 0.16.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/blakeblackshear/frigate/security/advisories/GHSA-8gv4-5jr9-v96j - https://github.com/blakeblackshear/frigate/commit/d7f7cd7be16bfe7a12766b797da6b8add687ccd9
CVE ID: CVE-2025-62383 State: PUBLISHED Published: 2025-10-13T21:12:38.655Z Last Updated: 2025-10-14T15:12:16.624Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62384 State: PUBLISHED Published: 2025-10-13T21:13:05.017Z Last Updated: 2025-10-13T23:13:53.671Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62385 State: PUBLISHED Published: 2025-10-13T21:12:08.724Z Last Updated: 2025-11-24T20:30:25.153Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62386 State: PUBLISHED Published: 2025-10-13T21:12:52.222Z Last Updated: 2025-10-13T23:14:12.585Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025
CVE ID: CVE-2025-62387 State: PUBLISHED Published: 2025-10-13T21:11:52.712Z Last Updated: 2025-11-24T20:30:39.895Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025