EXPOSURES › CVE-2025-4427

CVE-2025-4427

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-05-19 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-4427 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Ivanti EPMM API flaw allows unauthorized access via crafted requests

Ivanti's Endpoint Manager Mobile faced an authentication bypass vulnerability, enabling attackers to access protected resources without credentials. This was exploited by Chinese state-sponsored groups, leading to breaches at multiple government agencies.

Shame score — Critical security flaw exploited by nation-state actors, resulting in multiple breaches.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Ivanti · vendor Endpoint Manager Mobile (EPMM) · product

DESCRIPTION

Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests. This vulnerability results from an insecure implementation of the Spring Framework open-source library.

AFFECTED FEDRAMP PRODUCTS · 2

PRODUCT	PROVIDER	STATUS	MATCH
Ivanti Neurons for ITSM (Formerly Service Manager) Ivanti	Ivanti	Authorized	vendor-exact · 0.90
Ivanti Neurons for MDM (Formerly MobileIron) Ivanti	Ivanti	Authorized	vendor-exact · 0.90