PatchTheCVEmobileiron vulnerabilities
Recent CVEs affecting mobileiron products. 9 tracked.
mobileiron has 9 tracked vulnerabilities, 5 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 8. Most recent: 2021-03-29. Highest priority: CVE-2020-15505 (score 97/100).
- CVE-2021-3391 MEDIUM 5.3 UPGRADE UPGRADE MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexiste
- CVE-2020-35138 CRITICAL 9.8 UPGRADE UPGRADE The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encry
- CVE-2020-35137 HIGH 7.5 UPGRADE UPGRADE The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate
- CVE-2020-15507 HIGH 7.5 UPGRADE UPGRADE An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1,
- CVE-2020-15506 CRITICAL 9.8 UPGRADE UPGRADE An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0,
- CVE-2020-15505 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
- CVE-2014-5903 MEDIUM 5.4 DOWNGRADE The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates fr
- CVE-2014-1409 CRITICAL 9.1 UPGRADE UPGRADE MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerab
- CVE-2013-7287 CRITICAL 9.8 UPGRADE UPGRADE MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
FAQ
How do I fix mobileiron vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mobileiron being exploited right now?
Yes: 1 mobileiron CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which mobileiron CVE should I patch first?
CVE-2020-15505 currently ranks highest (97/100): Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability.