exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428

weaponized

Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution

view exploit source metasploittype exploitpublished 2025-05-13catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-4428UShigh8.8OT criticalKEV
Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via cr…
CVE-2025-4427UShigh7.5OT criticalKEV
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan