Ivanti · Endpoint Manager Mobile (EPMM)
CVE-2025-4428
Remote Code Execution
ما هي
Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.
CISA: Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036.
ما العمل
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
الموعد النهائي للوكالات الفدرالية الأمريكية: 9 يونيو 2025
ثغرات مُستغلّة أخرى من Ivanti
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 07/05/2026 | Improper Input Validation | Endpoint Manager Mobile (EPMM) | مرتفع 7.2 | 34% |
| 08/04/2026 | Code Injection | Endpoint Manager Mobile (EPMM) | حرجة 9.8 | 99% |
| 29/01/2026 | Code Injection | Endpoint Manager Mobile (EPMM) | حرجة 9.8 | 99% |
| 19/05/2025 | Authentication Bypass | Endpoint Manager Mobile (EPMM) | متوسطة 5.3 | 99.9% |
| 31/07/2023 | Path Traversal | Endpoint Manager Mobile (EPMM) | مرتفع 7.2 | 64% |
| 25/07/2023 | Endpoint Manager Mobile Authentication Bypass | Endpoint Manager Mobile (EPMM) | حرجة 10.0 | >99.9% |
| 30/10/2026 | Missing Authentication for Critical Function | Connect Secure | مرتفع 7.0 | 0.5% |
| 30/10/2026 | Generation of Predictable Numbers or Identifiers | Connect Secure | 0.8% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.