NetSight
high7.2

CVE-2025-6771

OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high pr…

Impact

OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve remote code execution

Affected products

VendorProductAffected versions
IvantiEndpoint Manager Mobile
before 12.3.0.3
from 12.4.0.0 before 12.4.0.3
from 12.5.0.0 before 12.5.0.2

Weakness classification

References