7.2
Élevée
CVE-2025-6771 OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a…
Description
OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve remote code execution
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Endpoint Manager Mobile 12.5 | premières → < 12.5.0.2 | 12.5.0.2 |
| Endpoint Manager Mobile 12.4 | premières → < 12.4.0.3 | 12.4.0.3 |
| Endpoint Manager Mobile 12.3 | premières → < 12.3.0.3 | 12.3.0.3 |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Endpoint Manager Mobile
Les 19 CVE de Endpoint Manager Mobile →
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote…
8.8
Élevée
CVE-2026-10727
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote…
7.2
Élevée
CVE-2026-5787
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote…
8.9
Élevée
CVE-2026-5788
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote…
7.0
Élevée