---
id: "CVE-2020-15505"
kind: "vulnerability"
aliases: ["CVE-2020-15505"]
title: "Ivanti MobileIron Multiple Products: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.99737
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Ivanti MobileIron Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "ivanti", "mdm", "mobileiron", "self-hosted", "vendor"]
not_affected_if: ["unknown"]
published_at: "2020-07-07T02:15:10+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15505", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-15505", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15505", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Ivanti MobileIron Multiple Products: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

Ivanti MobileIron Core, Connector, Sentry and Monitor and Reporting Database products contain an unspecified flaw that allows remote code execution. An attacker who can reach the product can run code on the server, and CISA lists it as actively exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Ivanti MobileIron Multiple Products affected ? fixed ?

## Fix

Apply the updates per the vendor instructions (CISA required action). Specific fixed versions: unknown

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-15505
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2020-15505
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2020-15505

## From the sources

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_