PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Vendor: Ivanti
Product: Endpoint Manager Mobile (EPMM)
EPSS: 0.999 (100.0th percentile, 2026-10-30)

Summary

Ivanti Endpoint Manager Mobile (EPMM) has an authentication bypass vulnerability in its API component that allows an attacker to access protected resources without proper credentials via crafted API requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-05-19.

Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.

Timeline

Date Event Source
2025-05-19 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.