Skip to content
Noroxi

mobileiron records

9 published records for vendor mobileiron.

Researcher profile

Entered KEV
1 · 11.1%
Weaponized
1 · 11.1%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
485 days

Records by year

  1. 20
  2. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2020-15505
    99Now

    A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3,

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    mobileiron · coreJul 6, 2020

  • CVE-2020-15506
    40Plan

    An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3,

    CriticalCVSS 9.8No exploitEPSS 2%

    mobileiron · cloudJul 6, 2020

  • CVE-2013-7287
    39Monitor

    MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.

    CriticalCVSS 9.8No exploitEPSS 1%

    mobileiron · sentryFeb 13, 2020

  • CVE-2020-35138
    39Monitor

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/

    CriticalCVSS 9.8No exploitEPSS 1%

    mobileiron · mobile\@workMar 29, 2021

  • CVE-2014-1409
    37Monitor

    MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with

    CriticalCVSS 9.1No exploitEPSS 4%

    mobileiron · virtual smartphone platformJan 8, 2020

  • CVE-2020-15507
    31Monitor

    An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0,

    HighCVSS 7.5No exploitEPSS 2%

    mobileiron · cloudJul 6, 2020

  • CVE-2020-35137
    30Monitor

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS disco

    HighCVSS 7.5No exploitEPSS 1%

    mobileiron · mobile\@workMar 29, 2021

  • CVE-2021-3391
    21Monitor

    MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing

    MediumCVSS 5.3No exploitEPSS 1%

    mobileiron · mobile\@workMar 29, 2021

  • CVE-2014-5903
    21Monitor

    The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows m

    MediumCVSS 5.4No exploitEPSS 0%

    mobileiron · mobile\@workSep 15, 2014