CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2025-44288.8/HIGHEPSS 88.0%CISA KEV
2025-05-13

Ivanti Endpoint Manager Mobile (EPMM) API Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-4428)

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior

[Impact] Authenticated attackers can execute arbitrary code with elevated privileges via crafted API requests, potentially leading to full system compromise.

[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict external access to the API endpoints.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse