What exactly are the Ivanti EPMM vulnerabilities that were discovered?

Two critical Ivanti EPMM vulnerabilities were found: CVE-2025-4427, an authentication bypass flaw (CVSS 5.3), and CVE-2025-4428, a remote code execution vulnerability (CVSS 7.2). When chained together, these Ivanti EPMM vulnerabilities allow attackers to access protected resources without authentication and then execute malicious code on the target system.

How do I know if my organization is affected by Ivanti EPMM Vulnerabilities?

Your organization is potentially vulnerable to these Ivanti EPMM vulnerabilities if you’re running on-premises Ivanti EPMM versions 11.12.0.4 or prior, 12.3.0.1 or prior, 12.4.0.1 or prior, or 12.5.0.0 or prior. Cloud-based Ivanti solutions like Ivanti Neurons for MDM are not affected by these particular Ivanti EPMM vulnerabilities.

Have these vulnerabilities been exploited in the wild?

Yes, according to Ivanti, a “very limited number of customers” have already been targeted with attacks exploiting these vulnerabilities. This makes patching even more urgent, as threat actors are actively using these flaws.

What should I do if I can't patch immediately?

If immediate patching isn’t possible, Ivanti recommends filtering access to the API using either the built-in Portal ACLs functionality or an external web application firewall. This can significantly reduce your risk of exploitation while you prepare to deploy the patches.

Are other Ivanti products affected by similar vulnerabilities?

Ivanti has also disclosed a separate critical vulnerability (CVE-2025-22462, CVSS 9.8) in on-premise versions of Neurons for ITSM. This flaw could allow unauthenticated attackers to gain administrative access. However, there’s currently no evidence of exploitation for this particular vulnerability.

Tag

CVE-2025-4428

Articles

Loading Content

$ loading --articles --category="CVE-2025-4428"

Fetching latest articles...

No Articles Found

We couldn't find any articles matching your criteria

Find systems, projects and engineering notes.

CVE-2025-4428

Advanced Filters

Tags

Date Range

No Articles Found

{post_title}

Critical Facts About Ivanti EPMM Vulnerabilities Urgent Security Patches for 2025

Critical Facts About Ivanti EPMM Vulnerabilities Urgent Security Patches for 2025

From Insights