CVE-2025-4428

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: May 19, 2025
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-44296.1The Gearside Developer Dashboard WordPress plugin through 1.0.72 does not sanitise and escape a parameter before outputting it back in the p CVE-2025-44308.6Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 CVE-2025-44314.3The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a m CVE-2025-44325.3A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows CVE-2025-44338.8Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "Us CVE-2025-44357.5When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and n CVE-2025-44375.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent u CVE-2025-44395.4An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 tha CVE-2025-44408.0A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of th CVE-2025-44419.8A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. Th CVE-2025-44429.8A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_W CVE-2025-44439.8A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipul