VULNERABILITY INTELLIGENCE

CVE-2025-4427

CVSS score5.3 MEDIUM
EPSS probability99.93%
CISA KEVKnown exploited vulnerability
Published2025-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Known Exploited Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Vendor / product: Ivanti / Endpoint Manager Mobile (EPMM)

Description

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Weakness classification

  • 3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-288

Primary references