Exploit / PoCcriticalExploited in the wild

CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List

The Hacker Newsby @TheHackersNewsMar 11, 2025 · 04:06 UTC (Mar 11, 2025)2 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-57968 CVE-2025-25181 CVE-2024-13159 CVE-2024-13160 CVE-2024-13161 CVE-2024-4577

Tags: cve-2024-57968 cve-2025-25181 cve-2024-13159 cve-2024-13160 cve-2024-13161 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-13159 +2 related CVEs CVE-2024-13160 CVE-2024-13161	Unauthenticated Absolute Path Traversal Info Leak in Ivanti Endpoint Manager (EPM)	7.5	100%	KEVPoC	Jan 14, 2025 KEV Mar 10, 2025
CVE-2024-4577	OS Command Injection in Windows PHP-CGI Allows Remote Code Execution	9.8	100%	KEVRansomwarePoC ×11	Jun 9, 2024 KEV Jun 12, 2024
CVE-2024-57968 +1 related CVE CVE-2025-25181	Unrestricted File Upload in Advantive VeraCore upload.aspx	8.8 group max	32%	KEVPoC ×2	Feb 3, 2025 KEV Mar 10, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 11, 2025 Enterprise Security / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.