Mobileiron Sentry — known CVE vulnerabilities

Every CVE whose affected-product data names Mobileiron Sentry, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2013-7287 — CVSS 9.8 (critical): MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
• CVE-2020-15505 — CVSS 9.8 (critical) — actively exploited: A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3…
• CVE-2020-15506 — CVSS 9.8 (critical): An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2…
• CVE-2014-1409 — CVSS 9.1 (critical): MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with…
• CVE-2020-15507 — CVSS 7.5 (high): An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0…