CVE-2025-6771 OS command injection in Ivanti Endpoint Manager

🗓️ 08 Jul 2025 15:38:48Reported by ivantiType

OS command injection in Ivanti Endpoint Manager allows remote code execution for high privilege attackers

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and mobile applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a perpetrator to execute arbitrary code.	21 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a perpetrator to execute arbitrary code.	21 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-6771	8 Jul 202515:55	–	circl
CNNVD	Ivanti Endpoint Manager Mobile 操作系统命令注入漏洞	8 Jul 202500:00	–	cnnvd
CNNVD	Ivanti Endpoint Manager Mobile 操作系统命令注入漏洞	8 Jul 202500:00	–	cnnvd
CVE	CVE-2025-6771	8 Jul 202515:38	–	cve
EUVD	EUVD-2025-20508	3 Oct 202520:07	–	euvd
EUVD	EUVD-2025-20528	3 Oct 202520:07	–	euvd
Ivanti	Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-6770, CVE-2025-6771)	8 Jul 202514:35	–	ivanti
Tenable Nessus	Ivanti Endpoint Manager Mobile 12.5.0.x < 12.5.0.2 / 12.4.0.x < 12.4.0.3 / 12.x < 12.3.0.3 Multiple Vulnerabilities	11 Jul 202500:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Endpoint Manager Mobile",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.5.0.2"
      },
      {
        "status": "unaffected",
        "version": "12.4.0.3"
      },
      {
        "status": "unaffected",
        "version": "12.3.0.3"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2025-6770-CVE-2025-6771

08 Jul 2025 15:44Current

CVSS 3.17.2

EPSS0.2385

CWE-78