VULNERABILITY INTELLIGENCE

CVE-2025-4428

CVSS score7.2 HIGH
EPSS probability88.00%
CISA KEVKnown exploited vulnerability
Published2025-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Vendor / product: Ivanti / Endpoint Manager Mobile (EPMM)

Description

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

Weakness classification

  • 3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-94

Primary references