CESS-2025-4428 — Vulnetix

CESS-2025-4428 PUBLISHED CVSS 8.8 HIGH

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests. [Coalition visibility: cisa-kev]

Risk Scores

CVSS 3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

May 13, 2025 CVE Published

Open in Interactive Console →