Ivanti Endpoint Manager Mobile

Name: Ivanti Endpoint Manager Mobile
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical3high1medium0low

updated 2026-10-26

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-35078US	critical9.8OT critical	100.0% (100th)	KEV	11.10	2023-07-25	3 versions
CVE-2025-4427US	high7.5OT critical	99.9% (100th)	KEV	12.4.0.2	2025-05-13	5 versions
CVE-2026-1281US	—OT critical	98.7% (100th)	KEV	12.x.1.x RPM	2026-01-29	5 versions
CVE-2026-1340US	—OT critical	98.6% (100th)	KEV	12.x.1.x RPM	2026-01-29	5 versions
CVE-2025-4428US	high8.8OT critical	88.0% (100th)	KEV	12.4.0.2	2025-05-13	5 versions
CVE-2026-6973US	—OT critical	34.5% (98th)	KEV	12.8.0.3	2026-05-07	10 versions
CVE-2025-6771US	—	23.0% (98th)	—	12.3.0.3	2025-07-08	4 versions
CVE-2025-10985US	—	20.4% (97th)	—	12.5.0.4	2025-10-14	6 versions
CVE-2025-10243US	—	20.4% (97th)	—	12.6.0.2	2025-10-14	6 versions
CVE-2025-10242US	—	20.4% (97th)	—	12.5.0.4	2025-10-14	6 versions
CVE-2025-6770US	—	19.5% (97th)	—	12.5.0.2	2025-07-08	4 versions
CVE-2026-10727US	—	13.6% (96th)	—	12.9.0.1	2026-06-09	6 versions
CVE-2026-5786US	—	11.2% (96th)	—	12.7.0.1	2026-05-07	7 versions
CVE-2026-18851US	—OT elevated	1.21% (68th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-5788US	critical9.8	0.82% (57th)	—	12.6.1.1	2026-05-07	7 versions
CVE-2026-5787US	critical9.1	0.69% (52nd)	—	12.7.0.1	2026-05-07	7 versions
CVE-2025-10986US	medium5.5	0.62% (49th)	—	12.4.0.4	2025-10-14	6 versions
CVE-2026-7821US	critical9.1	0.51% (43rd)	—	12.6.1.1	2026-05-07	7 versions
CVE-2024-7612US	high7.8	0.24% (15th)	—	12.1.0.4	2024-10-08	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-15External Control of System or Configuration Setting1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.