{"id":"CVE-2020-15505","kind":"vulnerability","aliases":["CVE-2020-15505"],"related":[],"title":"Ivanti MobileIron Multiple Products: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","description":"A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.","summary":"Ivanti MobileIron Core, Connector, Sentry and Monitor and Reporting Database products contain an unspecified flaw that allows remote code execution. An attacker who can reach the product can run code on the server, and CISA lists it as actively exploited.","severity":"critical","cvss":9.8,"epss":0.99737,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Ivanti MobileIron Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","ivanti","mdm","mobileiron","self-hosted","vendor"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the updates per the vendor instructions (CISA required action). Specific fixed versions: unknown","status":"open","published_at":"2020-07-07T02:15:10+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:37:18+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-23T21:37:18Z","model":"claude-haiku-5-5","output":{"fix":"Apply the updates per the vendor instructions (CISA required action). Specific fixed versions: unknown","reach":"internet","impact":"high","summary":"Ivanti MobileIron Core, Connector, Sentry and Monitor and Reporting Database products contain an unspecified flaw that allows remote code execution. An attacker who can reach the product can run code on the server, and CISA lists it as actively exploited.","category":"vendor","who_cares":["ivanti","mobileiron","mdm","self-hosted"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker runs arbitrary code on the MobileIron server.","analyst_note":"Find the vendor advisory and the fixed versions for MobileIron Core, Connector, Sentry and RDB, and the affected version ranges, via the CISA KEV entry and Ivanti's security advisory.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000474,"input_tokens":2865,"output_tokens":375,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the vendor advisory and the fixed versions for MobileIron Core, Connector, Sentry and RDB, and the affected version ranges, via the CISA KEV entry and Ivanti's security advisory.","search":"'-15505':15A,18A '-2020':14A,17A '10.3.0.3':81C '10.4.0.0':84C '10.4.0.1':85C '10.4.0.2':86C '10.4.0.3':87C '10.5.1.0':88C '10.5.2.0':89C '10.6.0.0':91C '2.0.0.1':107C '9.7.2':95C '9.8.0':99C 'activ':69B 'allow':47B,111C 'arbitrari':116C 'attack':52B,113C 'cisa':65B 'code':10A,49B,60B,73C,117C 'connector':34B,79C 'contain':42B 'core':33B,78C 'cve':13A,16A 'databas':40B,104C 'earlier':83C,97C,109C 'execut':11A,50B,74C,115C 'exploit':23B,70B 'flaw':45B 'host':29B 'ivanti':1A,5A,19A,24B,31B 'list':66B 'mdm':25B 'mobileiron':2A,6A,20A,26B,32B,77C 'monitor':37B,101C 'multipl':3A,7A 'multiple':21A 'product':4A,8A,41B,57B 'products':22A 'rdb':105C 'reach':55B 'remot':9A,48B,72C,112C 'report':39B,103C 'run':59B 'self':28B 'self-host':27B 'sentri':35B,93C 'server':63B 'unspecifi':44B,119C 'vector':120C 'vendor':30B 'version':80C,94C,106C 'via':118C 'vulner':12A,75C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-07-07T02:15:10+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-15505","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15505","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T12:39:25+00:00","note":null},{"source":"epss","external_id":"CVE-2020-15505","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-15505","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-15505","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15505","severity":null,"published_at":"2020-07-07T02:15:10+00:00","modified_at":"2026-06-17T02:56:45+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}