PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Vendor: Ivanti
Product: Endpoint Manager Mobile (EPMM)
EPSS: 0.880 (99.8th percentile, 2026-10-30)

Summary

Ivanti Endpoint Manager Mobile (EPMM) is affected by a code injection vulnerability that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-05-19.

Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.

Timeline

Date Event Source
2025-05-19 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.