← Database

CVE-2025-4427

MEDIUM CVSS: 5.3 Published: 2025-05-13 Modified: 2026-06-17

Description

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Affected Platforms

Ivanti Endpoint Manager Mobile

Weakness Type

CWE-288

References