Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2025-4427

CVSS 5.3 Actively exploited (KEV) 1 detection found
View on NVD →
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Detection rules

Source Rule Status Updated
sigma Potential Exploitation of CVE-2025-4427/4428 Ivanti EPMM Pre-Auth RCE experimental 2025-05-20