Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

🗓️ 19 May 2025 00:00:00Reported by CISAType

Ivanti Endpoint Manager Mobile has a code injection vulnerability allowing remote code execution via API.

Reporter	Title	Published	Views	Family All 87
GithubExploit	Exploit for Code Injection in Ivanti Endpoint_Manager_Mobile	16 May 202500:42	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile	15 May 202513:59	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile	31 Aug 202519:00	–	githubexploit
ATTACKERKB	CVE-2025-4428	13 May 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-4427	13 May 202500:00	–	attackerkb
Information Security Automation	June Linux Patch Wednesday	1 Jul 202511:28	–	avleonov
BDU FSTEC	The vulnerability of the application interface for managing the lifecycle of mobile devices and Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core) allows a perpetrator to execute arbitrary code.	21 May 202500:00	–	bdu_fstec
Circl	CVE-2025-35036	3 Jun 202521:56	–	circl
Circl	CVE-2025-4428	13 May 202516:30	–	circl
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	19 May 202512:00	–	cisa