CVE-2025-4428 vulnerabilities and exploits

(subscribe to this query)

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated malicious users to execute arbitrary code via crafted API requests.

Ivanti Endpoint Manager Mobile Ivanti Endpoint Manager Mobile 12.5.0.0

2 Github repositories6 Articles

Hibernate Validator prior to 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an malicious user to access sensitive information or execute arbitrary Java code...

Hibernate Hibernate Validator

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows malicious users to access protected resources without proper credentials via the API.

Ivanti Endpoint Manager Mobile Ivanti Endpoint Manager Mobile 12.5.0.0

2 Github repositories5 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook