Ivanti MobileIron vulnerabilities

2 CVEs affecting Ivanti MobileIron, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3540, published 2021-07-22.

More from Ivanti.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3540, published 2021-07-22. High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days. By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
• CVE-2021-3198, published 2021-07-22. High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days. By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.