[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcNlnFPRjmIV4plvHzurMLREJ_tVyNZUGPUq0yNOfWoM":3,"g5a-risk:CVE-2025-4427":140},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":28,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":4,"cisaInfo":68,"otxData":28,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":115,"notableEvents":116},"CVE-2025-4427","What is CVE-2025-4427?","An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.","An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without pro...","2025-05-13T16:15:32.33","2025-05-21T18:45:49.493",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","NETWORK","LOW","NONE","UNCHANGED",5.3,"MEDIUM",null,3.9,1.4,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":35,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH",3.6,[],[],0.99924,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ivanti","endpoint_manager_mobile","*","cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"12.5.0.0","cpe:2.3:a:ivanti:endpoint_manager_mobile:12.5.0.0:*:*:*:*:*:*:*",2,[53],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FSecurity-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM","Ivanti",[57],"Vendor Advisory",1,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",{"shortDescription":64,"requiredAction":64,"vulnerabilityName":64,"dateAdded":28},[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2025-4427? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-4427, a high severity cyber security vulnerability from 2025. High exploit probability (99.9%). An authentication bypass i...","CVE-2025-4427, CVE-2025-4427 vulnerability, CVE-2025-4427 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, ivanti security, endpoint_manager_mobile vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-4427",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-4427","Cybersecurity","CVE-2025-4427, CVE-2025-4427 vulnerability, CVE-2025-4427 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":28,"Negate":28,"Nodes":97},[98],{"Operator":99,"Negate":100,"CPEMatch":101},"OR",false,[102,105,109,113],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":103,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":104,"VersionEndIncluding":28},"BDF89238-9401-4106-8999-511712A0A51F","11.12.0.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":106,"VersionStartExcluding":28,"VersionStartIncluding":107,"VersionEndExcluding":108,"VersionEndIncluding":28},"A3F4C3FB-278B-4F4D-A5EF-188F49322405","12.3.0.0","12.3.0.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":28,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":28},"95FC0377-42AE-49FD-BE90-919F46D075C9","12.4.0.0","12.4.0.2",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":114,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C3F9CD37-B058-4D65-86B1-9168215D2608",[],[117,124,131],{"id":118,"eventType":119,"eventTime":120,"details":121,"label":122,"color":123},"cac3c6a5-07d5-4fb7-8477-cc06f62bd241","NEW_NVD","2025-05-14T02:15:34.837183+00:00","New CVE added to NVD","Published to NVD","blue",{"id":125,"eventType":126,"eventTime":127,"details":128,"label":129,"color":130},"47892d99-99dd-460d-96c2-512167263e96","NEW_CISA","2025-05-19T23:45:04.509615+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":132,"eventType":133,"eventTime":134,"details":135,"label":136,"color":130},"4c1c2827-dd34-453d-b691-e03b93a40ddd","HIGH_EPSS_DELTA","2025-06-11T10:09:39.697954+00:00","Daily EPSS score increased by 0.813 on 2025-05-15","EPSS Score Increased",{"lastModified":11,"cacheTime":138,"version":139},1792329991881,"2.0",{"score":141,"band":41,"action":142,"scoredAt":143},83,"Emergency patch","2026-10-16T07:07:15.471453+00:00"]