CVE-2025-4427

Description

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

Severity: MEDIUM

CVSS Score: 5.3