High severity · published Aug 7, 2024
CVE-2024-36131
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying…
8.8
CVSS
2.3%
EPSS
No
On KEV
Description
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying operating system of the appliance.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Endpoint Manager Mobile · Ivanti
before 12.1.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-36131
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-36131
Vendor Advisory
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024
More from Endpoint Manager Mobile
9.8
CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
9.8
CVE-2026-1281
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
9.8
CVE-2023-35082
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
9.8
CVE-2023-35078
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
8.8
CVE-2025-4428
Remote Code Execution