Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2020-15505

🗓️ 07 Jul 2020 01:43:52Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1564 Views🌐 WEB

CVE-2020-15505: Remote code execution vulnerability in MobileIron Core & Connecto

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today		MobileIron MDM Hessian-Based Java Deserialization Remote Code Execution Exploit
27 Jan 202100:00
–zdt
ICS		Potential for China Cyber Response to Heightened U.S.–China Tensions
20 Oct 202012:00
–ics
ICS		APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations
24 Oct 202012:00
–ics
ICS		Top Routinely Exploited Vulnerabilities
20 Aug 202112:00
–ics
ATTACKERKB		CVE-2020-15505
7 Jul 202000:00
–attackerkb
ATTACKERKB		CVE-2020-15506
7 Jul 202000:00
–attackerkb
BDU FSTEC		The vulnerabilities include those of the MobileIron Core, a secure mobile gateway for managing the lifecycle of mobile devices and applications; the MobileIron Sentry, an application for data monitoring; the MobileIron Monitor and Reporting Database (RDB), an application for collecting data about devices and software; and the MobileIron Enterprise Connector, which is related to access control deficiencies, allowing attackers to execute arbitrary code.
1 Dec 202100:00
–bdu_fstec
Circl		CVE-2020-15505
13 Oct 202006:50
–circl
CISA KEV Catalog		Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
3 Nov 202100:00
–cisa_kev
Check Point Advisories		MobileIron Core And Connector Remote Code Execution (CVE-2020-15505)
21 Oct 202000:00
–checkpoint_advisories
Rows per page
NVD
Node
mobileironcoreRange<10.3.0.4
OR
mobileironcoreRange10.4.0.0–10.4.0.4
OR
mobileironcoreRange10.5.1.0–10.5.1.1
OR
mobileironcoreRange10.5.2.0–10.5.2.1
OR
mobileironcoreRange10.6.0.0–10.6.0.1
OR
mobileironenterprise_connectorRange<10.3.0.4
OR
mobileironenterprise_connectorRange10.4.0.0–10.4.0.4
OR
mobileironenterprise_connectorRange10.5.1.0–10.5.1.1
OR
mobileironenterprise_connectorRange10.5.2.0–10.5.2.1
OR
mobileironenterprise_connectorRange10.6.0.0–10.6.0.1
OR
mobileironmonitor_and_reporting_databaseRange<2.0.0.2
OR
mobileironsentryRange9.7.0–9.7.3
OR
mobileironsentryRange9.8.0–9.8.1
ParameterPositionPathDescriptionCWE
datarequest body/mifs/.;/services/LogServiceHessian-based deserialization RCE endpoint exploited via POST to LogServiceCWE-706
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:56Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 3.19.8
EPSS0.99737
SSVC
CWE-706In Wild
cve202015505remote code executionvulnerabilitymobileironcoreconnectorsentrymonitorreporting databaserdbnvd
1564