Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.

Published: 2025-12-09

CVSS: 9.6

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Download Exploit for CVE-2025-10573 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-722-cve-2007-3010/

https://tatramed.sk/exploit-351-cve-2017-0005/