{"affected":[{"defaultStatus":"affected","product":"Endpoint Manager Mobile","source":"CNA: ivanti","vendor":"Ivanti","versions":[{"status":"unaffected","version":"12.6.0.2"},{"status":"unaffected","version":"12.5.0.4"},{"status":"unaffected","version":"12.4.0.4"}]}],"cveId":"CVE-2025-10243","cwes":["CWE-78"],"description":"OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.","epss":{"date":"2026-11-03","percentile":0.97602,"score":0.21297},"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"CNA: ivanti","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793742767644,"publishedAt":1760451475836,"references":[{"source":"CNA: ivanti","tags":[],"url":"https://forums.ivanti.com/s/article/Security-Advisory-Endpoint-Manager-Mobile-EPMM-10-2025-Multiple-CVEs?language=en_US"}],"remediation":[],"revision":"dfd5ad2091941668b0fc765969be4b85a5a2033e5ec155fcebe1ee36b4595217","sources":[{"modifiedAt":1793742767644,"name":"CNA: ivanti","retrievedAt":1793744125922,"url":"https://www.cve.org/CVERecord?id=CVE-2025-10243"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793747323103,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-10243"}],"ssvc":{"assessedAt":1760759733924,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2025-10243","updatedAt":1793747323103}