Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428) ยท updates https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427 CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests. This vulnerability results from an insecure implementation of the Spring Framework open-source library. CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036. Added to CISA KEV on 2025-05-19. en Mon, 19 May 2025 00:00:00 GMT Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428): CISA added CVE-2025-4427 to the KEV catalog (due 2025-06-09). https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427 https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427#2025-05-19-22ebaaa5 Mon, 19 May 2025 00:00:00 GMT high <p>Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428): CISA added CVE-2025-4427 to the KEV catalog (due 2025-06-09).</p> Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428): CISA added CVE-2025-4428 to the KEV catalog (due 2025-06-09). https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427 https://pwn.watch/i/ivanti-endpoint-manager-mobile-epmm-cve-2025-4427#2025-05-19-2c54bb4a Mon, 19 May 2025 00:00:00 GMT high <p>Ivanti Endpoint Manager Mobile (EPMM): 2 exploited vulnerabilities (CVE-2025-4427, CVE-2025-4428): CISA added CVE-2025-4428 to the KEV catalog (due 2025-06-09).</p>