Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 19/05/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager mobile | = 12.5.0.0≥ 12.3.0.0, < 12.3.0.2≥ 12.4.0.0, < 12.4.0.2< 11.12.0.5 | 12.3.0.212.4.0.211.12.0.5 |
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free