Vulnerabilities > Ivanti > Mobileiron > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-22 CVE-2021-3198 OS Command Injection vulnerability in Ivanti Mobileiron 10.7.0.19/11.0.0.0
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core.
network
low complexity
ivanti CWE-78
7.2
2021-07-22 CVE-2021-3540 Argument Injection or Modification vulnerability in Ivanti Mobileiron 10.7.0.19/11.0.0.0
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core.
network
low complexity
ivanti CWE-88
7.2