CVE Vulnerability Advisory Database

[Affected Scope] Ivanti EPMM versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1

[Impact] A remotely authenticated attacker with administrative privileges can exploit improper input validation to execute arbitrary code and fully compromise the system.

[Mitigation] Immediately upgrade to the patched versions (12.6.1.1, 12.7.0.1, 12.8.0.1, or higher) provided by the vendor.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) affected versions

[Impact] Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to exposed management interfaces

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)

[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior

[Impact] Authenticated attackers can execute arbitrary code with elevated privileges via crafted API requests, potentially leading to full system compromise.

[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict external access to the API endpoints.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior

[Impact] Unauthenticated remote attackers can bypass authentication via the API component to access protected resources and sensitive data without credentials

[Mitigation] Immediately apply the official vendor security patches and restrict external access to the API endpoints

[Affected Scope] Ivanti EPMM (Endpoint Manager Mobile) 11.10 and older, and MobileIron Core 11.2 and older

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, compromise sensitive data, or execute arbitrary commands

[Mitigation] Immediately upgrade to the latest supported release and restrict external access to administrative API endpoints

[Affected Scope] Ivanti EPMM versions 11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2, and 11.8.x < 11.8.1.2

[Impact] An authenticated administrator can write arbitrary files to the appliance via path traversal, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the admin portal

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM, formerly MobileIron Core) versions 11.4, 11.10, 11.11, and all older/supported releases

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, allowing them to harvest sensitive personally identifiable information (PII) or create unauthorized administrative accounts

[Mitigation] Immediately apply the official security patches or upgrade to Ivanti EPMM version 11.12 or higher, and restrict external access to administrative interfaces