CVE-2025-4428

🔥 Known Exploited (CISA KEV)HIGH

7.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-05-13

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

Affected Platforms (CPE)

📦

Ivanti

Endpoint Manager Mobile

< 11.12.0.5>= 12.3.0.0 and < 12.3.0.2>= 12.4.0.0 and < 12.4.0.2= 12.5.0.0

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4428

Vulnerability Description

Affected Platforms (CPE)

Endpoint Manager Mobile

References & Advisories

相關漏洞威脅