CVE-2025-4427

Published May 13, 2025

Last updated 2 months ago

Ivanti EPMM

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-4427 is an authentication bypass vulnerability found in Ivanti Endpoint Manager Mobile (EPMM) version 12.5.0.0 and prior. It exists in the API component of the software. This vulnerability allows attackers to access protected resources without proper credentials via the API.

Description: An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
Exploit added on: May 19, 2025
Exploit action due: Jun 9, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-288

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BDF89238-9401-4106-8999-511712A0A51F",
            "versionEndExcluding": "11.12.0.5"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3F4C3FB-278B-4F4D-A5EF-188F49322405",
            "versionEndExcluding": "12.3.0.2",
            "versionStartIncluding": "12.3.0.0"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "95FC0377-42AE-49FD-BE90-919F46D075C9",
            "versionEndExcluding": "12.4.0.2",
            "versionStartIncluding": "12.4.0.0"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:endpoint_manager_mobile:12.5.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C3F9CD37-B058-4D65-86B1-9168215D2608"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.