CVE-2025-4427

🔥 Known Exploited (CISA KEV)MEDIUM

5.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-05-13

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Affected Platforms (CPE)

📦

Ivanti

Endpoint Manager Mobile

< 11.12.0.5>= 12.3.0.0 and < 12.3.0.2>= 12.4.0.0 and < 12.4.0.2= 12.5.0.0

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427

Vulnerability Description

Affected Platforms (CPE)

Endpoint Manager Mobile

References & Advisories

相关漏洞威胁