Mobileiron vulnerabilities

Products

• Sentry 5
• Mobile\@work 4
• Core 3
• Enterprise Connector 3
• Cloud 2
• Reporting Database 2
• Virtual Smartphone Platform 2

Newest

• mobileiron mobile\@work MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled,... CVE-2021-3391 5.3 MediumMarch 29, 2021
• mobileiron mobile\@work The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key,... CVE-2020-35138 Disputed 9.8 CriticalMarch 29, 2021
• mobileiron mobile\@work The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to... CVE-2020-35137 Disputed 7.5 HighMarch 29, 2021
• mobileiron core, monitor and reporting database, sentry +2 more +4 more MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10... CVE-2020-15505 In KEVPublic exploit EPSS 99.7% 9.8 CriticalJuly 7, 2020
• mobileiron core, cloud, enterprise connector +2 more +4 more MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10... CVE-2020-15506 9.8 CriticalJuly 7, 2020
• mobileiron core, cloud, enterprise connector +2 more +4 more MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10... CVE-2020-15507 7.5 HighJuly 7, 2020
• mobileiron sentry, virtual smartphone platform +1 more MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme. CVE-2013-7287 9.8 CriticalFebruary 13, 2020
• mobileiron sentry, virtual smartphone platform +1 more MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication... CVE-2014-1409 9.1 CriticalJanuary 8, 2020
• mobileiron mobile\@work The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509... CVE-2014-5903 5.4 MediumSeptember 15, 2014