Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2020-15505: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

97
Patch now
CRITICAL 9.8EXPLOITEDREMOTEUPGRADEUPGRADEUPGRADE

CVE-2020-15505 is a critical-severity flaw (CVSS 9.8) affecting core, enterprise connector, monitor and reporting database, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.

Why this priority

  • Critical severity
  • EPSS top 1%: very likely to be exploited
  • Exploited in the wild (CISA KEV)
  • Public exploit reference
  • CISA SSVC: automatable with total technical impact
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score9.8 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance99.7% (top 1%)
CISA exploited listYes, fix due 2022-05-03
WeaknessCWE-706
Published2020-07-07
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: mobileiron

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

mobileiron core UPGRADE
Affected: < 10.3.0.4 · >= 10.4.0.0 and < 10.4.0.4 · >= 10.5.1.0 and < 10.5.1.1 · >= 10.5.2.0 and < 10.5.2.1 · >= 10.6.0.0 and < 10.6.0.1
Fixed in: 10.3.0.4, 10.4.0.4, 10.5.1.1, 10.5.2.1, 10.6.0.1
Safe to downgrade to: a release before 10.4.0.0
1. Check installed version
apt-cache policy core || rpm -q core || core --version
2. UPGRADE to 10.3.0.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade core
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade core
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 10.4.0.0 (Debian / Ubuntu)
apt-cache madison core sudo apt install core=<VERSION_BEFORE_10.4.0.0> sudo apt-mark hold core
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list core sudo dnf downgrade core-<VERSION_BEFORE_10.4.0.0> sudo dnf versionlock add core
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
mobileiron enterprise connector UPGRADE
Affected: < 10.3.0.4 · >= 10.4.0.0 and < 10.4.0.4 · >= 10.5.1.0 and < 10.5.1.1 · >= 10.5.2.0 and < 10.5.2.1 · >= 10.6.0.0 and < 10.6.0.1
Fixed in: 10.3.0.4, 10.4.0.4, 10.5.1.1, 10.5.2.1, 10.6.0.1
Safe to downgrade to: a release before 10.4.0.0
1. Check installed version
apt-cache policy enterprise-connector || rpm -q enterprise-connector || enterprise-connector --version
2. UPGRADE to 10.3.0.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade enterprise-connector
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade enterprise-connector
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 10.4.0.0 (Debian / Ubuntu)
apt-cache madison enterprise-connector sudo apt install enterprise-connector=<VERSION_BEFORE_10.4.0.0> sudo apt-mark hold enterprise-connector
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list enterprise-connector sudo dnf downgrade enterprise-connector-<VERSION_BEFORE_10.4.0.0> sudo dnf versionlock add enterprise-connector
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
mobileiron monitor and reporting database UPGRADE
Affected: < 2.0.0.2
Fixed in: 2.0.0.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy monitor-and-reporting-database || rpm -q monitor-and-reporting-database || monitor-and-reporting-database --version
2. UPGRADE to 2.0.0.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade monitor-and-reporting-database
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade monitor-and-reporting-database
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
mobileiron sentry UPGRADE
Affected: >= 9.7.0 and < 9.7.3 · >= 9.8.0 and < 9.8.1
Fixed in: 9.7.3, 9.8.1
Safe to downgrade to: a release before 9.7.0
1. Check installed version
apt-cache policy sentry || rpm -q sentry || sentry --version
2. UPGRADE to 9.7.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade sentry
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade sentry
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 9.7.0 (Debian / Ubuntu)
apt-cache madison sentry sudo apt install sentry=<VERSION_BEFORE_9.7.0> sudo apt-mark hold sentry
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list sentry sudo dnf downgrade sentry-<VERSION_BEFORE_9.7.0> sudo dnf versionlock add sentry
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.

Exact fixes by distribution

Fedora 46 · feh · FIXED · 3.13.1-1.fc46 · FEDORA-2026-3c76a13a4f · source
sudo dnf upgrade --advisory=FEDORA-2026-3c76a13a4f
Fedora ELN · setroubleshoot · FIXED · 3.3.37-7.eln159 · FEDORA-2026-f81b122fe1 · source
sudo dnf upgrade --advisory=FEDORA-2026-f81b122fe1

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · CISA KEV catalog · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2020-15505?

core: upgrade to 10.3.0.4, 10.4.0.4, 10.5.1.1, 10.5.2.1, 10.6.0.1; enterprise connector: upgrade to 10.3.0.4, 10.4.0.4, 10.5.1.1, 10.5.2.1, 10.6.0.1; monitor and reporting database: upgrade to 2.0.0.2. Exact commands for each OS are on this page.

Is CVE-2020-15505 being exploited?

Yes. CVE-2020-15505 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.

What does CVE-2020-15505 affect?

CVE-2020-15505 affects core, enterprise connector, monitor and reporting database. Severity is critical (CVSS 9.8). A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and R

How urgent is CVE-2020-15505?

Priority 97/100. Critical severity; EPSS top 1%: very likely to be exploited; Exploited in the wild (CISA KEV); Public exploit reference; CISA SSVC: automatable with total technical impact; Remotely exploitable, no login, no user action

Software pages

Ivanti vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.