Ivanti has issued security patches to rectify two vulnerabilities in Endpoint Manager Mobile (EPMM) software that have been exploited in attacks to achieve remote code execution.
The specific vulnerabilities are enumerated below –

CVE-2025-4427 (CVSS score: 5.3) – A flaw in Ivanti Endpoint Manager Mobile that permits unauthorized access to secured resources, enabling attackers to bypass authentication without valid credentials.