Browse CVEs

CRITICAL 9.8 CVE-2020-35138 The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password … Mobile\@work after 2021-03-22 Fix from $2,3002021-03-29 HIGH 7.5 CVE-2020-35137 The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API,… Mobile\@work after 2021-03-22 Fix from $1,9502021-03-29 MEDIUM 5.3 CVE-2021-3391 MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the numbe… Mobile\@work after 12.11.1 Fix from $1,6002021-03-29 CRITICAL 9.8 CVE-2020-15505 KEVEPSS 100% A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0,… Core 2.0.0.2 / 9.7.3+ Fix from $2,3002020-07-07 CRITICAL 9.8 CVE-2020-15506 An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0… Cloud after 10.6 Fix from $2,3002020-07-07 HIGH 7.5 CVE-2020-15507 An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 … Cloud after 10.6 Fix from $1,9502020-07-07 CRITICAL 9.8 CVE-2013-7287 MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme. Sentry 5.0 / 5.9.1+ Fix from $2,3002020-02-13 CRITICAL 9.1 CVE-2014-1409 MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscate… Virtual Smartphone Platform 5.0 / 5.9.1+ Fix from $2,3002020-01-08 MEDIUM 5.4 CVE-2014-5903 The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the… Mobile\@work Mitigation only Fix from $1,6002014-09-15