CVE-2025-4427 — Authentication Bypass

CVE-2025-4427

Authentication Bypass PUBLISHED

Description (CNA)

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Affected (CNA)

Vendor / product	Versions
Ivanti / Endpoint Manager Mobile	unaffected 12.5.0.1

CWE

CWE-288

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427