CyberSec.Space Logo
Back to CVE Browser

CVE-2025-4427

🔥 Known Exploited (CISA KEV)MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-05-13
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Affected Platforms (CPE)

📦
Ivanti

Endpoint Manager Mobile

< 11.12.0.5>= 12.3.0.0 and < 12.3.0.2>= 12.4.0.0 and < 12.4.0.2= 12.5.0.0

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427

Related Vulnerabilities

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-400001.8

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files...

CVE-2026-658948.7

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could ex...