CVE-2014-8487: Kony Enterprise Mobile Management

Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days.

Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.

Affected products

• Kony Enterprise Mobile Management: up to and including 1.2

Published 2015-02-24. Last modified 2026-06-17.