CVE-2025-4427 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper…
Medium KEV CVSS: 5.3

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
Vendor
Ivanti
Product
Endpoint Manager Mobile
CWE
CWE-288
Yayın Tarihi
2025-05-13 16:15:32
Güncelleme
2025-10-24 13:55:27
Source Identifier
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
KEV Date Added
2025-05-19

Kategoriler

CWE-288 Endpoint Manager Mobile MEDIUM Ivanti 2025

Referanslar

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427