threat
engine
.sh
Back
·
··:··
Home
/
Product
/
ivanti endpoint manager mobile
Product
ivanti endpoint manager mobile
28 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2026-7821
< 12.6.1.1
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated
7.4
HIGH
CVE-2026-6973
< 12.6.1.1
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated u
7.2
HIGH
CVE-2026-5788
< 12.6.1.1
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attac
7.0
HIGH
CVE-2026-5787
< 12.6.1.1
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated
8.9
HIGH
CVE-2026-5786
< 12.6.1.1
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authentic
8.8
HIGH
CVE-2026-1340
<= 12.7.0.0
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
9.8
CRITICAL
CVE-2026-1281
<= 12.5.0.0
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
9.8
CRITICAL
CVE-2025-10986
< 12.4.0.4
Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated att
4.7
MEDIUM
CVE-2025-10985
< 12.4.0.4
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticat
7.2
HIGH
CVE-2025-10243
< 12.4.0.4
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticat
7.2
HIGH
CVE-2025-10242
< 12.4.0.4
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticat
7.2
HIGH
CVE-2025-6771
< 12.3.0.3
OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authe
7.2
HIGH
CVE-2025-6770
< 12.3.0.3
OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with
7.2
HIGH
CVE-2025-4428
< 11.12.0.5
Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authen
7.2
HIGH
CVE-2025-4427
< 11.12.0.5
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access prot
5.3
MEDIUM
CVE-2024-7612
< 12.0.0.5
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application component
8.8
HIGH
CVE-2024-36132
< 12.1.0.1
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication a
7.5
HIGH
CVE-2024-36131
< 12.1.0.1
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to ex
8.8
HIGH
CVE-2024-36130
< 12.1.0.1
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the
9.8
CRITICAL
CVE-2024-34788
< 12.1.0.1
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access poten
6.5
MEDIUM
CVE-2024-22026
< 12.1.0.0
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction
6.7
MEDIUM
CVE-2023-46807
< 12.1.0.0
An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to
6.7
MEDIUM
CVE-2023-46806
< 12.1.0.0
An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate p
6.7
MEDIUM
CVE-2023-39337
<= 11.9.0
A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device id
9.1
CRITICAL
CVE-2023-39335
< 11.9.0
A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat ac
9.8
CRITICAL
CVE-2023-35082
< 11.11.0
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionalit
9.8
CRITICAL
CVE-2023-35081
>= 11.8.0 and < 11.8.1.2
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an a
7.2
HIGH
CVE-2023-35078
< 11.8.1.1
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of
9.8
CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin