CVE-2025-4427

🗓️ 13 May 2025 15:45:35Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 24 Media mentions👁 304 Views

Authentication bypass in Ivanti Endpoint Manager Mobile allows unauthorized API access to resources.

Reporter	Title	Published	Views	Family All 53
GithubExploit	Exploit for Code Injection in Ivanti Endpoint_Manager_Mobile	16 May 202500:42	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile	15 May 202513:59	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile	31 Aug 202519:00	–	githubexploit
ATTACKERKB	CVE-2025-4428	13 May 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-4427	13 May 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the application interface for managing the lifecycle of mobile devices and mobile applications in Ivanti Endpoint Manager Mobile (EPMM) – previously known as MobileIron Core – allows a malicious actor to circumvent security restrictions and gain unauthorized access to protected information.	28 May 202500:00	–	bdu_fstec
Circl	CVE-2025-4427	13 May 202516:30	–	circl
CISA KEV Catalog	Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability	19 May 202500:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	19 May 202512:00	–	cisa
CNNVD	Ivanti Endpoint Manager Mobile 安全漏洞	13 May 202500:00	–	cnnvd

NVD

Vulners

Node

ivanti endpoint_manager_mobileRange<11.12.0.5

ivanti endpoint_manager_mobileRange12.3.0.0–12.3.0.2

ivanti endpoint_manager_mobileRange12.4.0.0–12.4.0.2

ivanti endpoint_manager_mobileMatch12.5.0.0

[
  {
    "defaultStatus": "affected",
    "product": "Endpoint Manager Mobile",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.5.0.1"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 09:33Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.3 - 7.5

EPSS0.99566

SSVC