EM
Mobile
Endpoint Manager Mobile
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 17Medium 5Low 0
Watch
Add Endpoint Manager Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22026 | 6.7 | May 22 | A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance Affected: before 12.1.0.0 |
| CVE-2023-46807 | 6.7 | May 22 | An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database Affected: before 12.1.0.0 |
| CVE-2023-46806 | 6.7 | May 22 | An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the… Affected: before 12.1.0.0 |
| CVE-2024-34788 | 6.5 | Aug 7 | An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information Affected: before 12.1.0.1 |
| CVE-2025-10986 | 5.5 | Oct 14 | Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to write data in… Affected: before 12.4.0.4; 12.5.0.0 before 12.5.0.4; 12.6.0.0 before 12.6.0.2 |
Showing 5