CVE-2020-15505VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-15505: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

Affects Ivanti MobileIron Multiple ProductsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 99.7% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-15505 (opens in a new tab)

Description

CVE-2020-15505 is a high-severity remote code execution vulnerability affecting multiple Ivanti MobileIron products including Core & Connector, Sentry, and Monitor and Reporting Database (RDB). The vulnerability allows an attacker to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information are provided.

Summary

Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified remote code execution vulnerability identified as CVE-2020-15505. This vulnerability enables attackers to execute code remotely on affected systems. The vulnerability is associated with CWE-706 (Use of Incorrectly-Resolved Name or Reference). Exploitation has been observed in the wild. No detailed technical information or patch availability is provided in the source data.

Impact

Successful exploitation of this vulnerability allows remote code execution on affected Ivanti MobileIron products, potentially leading to full system compromise. The vulnerability has been exploited in the wild, indicating active threat. The exact impact depends on the deployment and configuration of the affected products.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Ivanti's advisories and apply updates as soon as they become available. Until then, consider restricting network access to affected systems and applying compensating controls as appropriate.

Weaknesses

CWE-706Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:20:27 UTC

Weaknesses

References

Related threats