WID-SEC-W-2025-1494

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Ivanti Endpoint Manager Mobile: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2025-07-08

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager Mobile ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-6771US——
OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve…
CVE-2025-6770US——
OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with high privileges to achieve remote code execution
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan