Main Vulnerability Database Vulnerabilities #VU46745

Code Injection in Ivanti products - CVE-2020-15505

Published: July 7, 2020 / Updated: October 9, 2021

Vulnerability identifier: #VU46745

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-15505

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote attacker can execute arbitrary code on the target system via unspecified vectors.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Enterprise Connector
Reporting Database (RDB)
MobileIron Cloud
Endpoint Manager Mobile (formerly MobileIron Core)
MobileIron Sentry

Install updates from vendor's website.