CVE-2025-4427

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Endpoint Manager Mobile

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

13. Mai 2025

Ausgewertete Quellen

• Hersteller
  https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427
• CISA
  Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
• NVD
  CVE-2025-4427