Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-35078
HistoryJul 25, 2023 - 7:15 a.m.

CVE-2023-35078

2023-07-2507:15:10
CWE-287
[email protected]
web.nvd.nist.gov
2561
In Wild
ivanti endpoint manager
epmm
mobileiron core
cve-2023-35078
authentication bypass
pii
administrative account
configuration change
patch available

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

Related

prion 2
githubexploit 10
nessus 2
thn 7
cvelist 2
cisa_kev 2
malwarebytes 3
attackerkb 2
nuclei 2
cve 1
rapid7blog 3
ics 1
prion
prion
Authentication flaw
2023-07-25 07:15:00
Authentication flaw
2023-08-15 16:15:00
githubexploit
githubexploit
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2023-07-31 02:24:24
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2023-08-04 07:08:06
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2023-07-29 19:58:33
nessus
nessus
Ivanti Endpoint Manager Mobile Remote Unauthenticated API Access (CVE-2023-35078)
2023-08-01 00:00:00
Ivanti Endpoint Manager Mobile < 11.8.1.1 / 11.9.x < 11.9.1.1 / 11.10.x < 11.10.0.2 Remote Unauthenticated API Access (CVE-2023-35078)
2023-07-25 00:00:00
thn
thn
Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation
2023-07-25 03:51:00
Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack
2023-07-29 04:27:00
Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability
2023-08-02 03:41:00
cvelist
cvelist
CVE-2023-35078
2023-07-25 06:08:38
CVE-2023-35082
2023-08-15 15:11:56
cisa_kev
cisa_kev
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
2023-07-25 00:00:00
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
2023-07-31 00:00:00
malwarebytes
malwarebytes
Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild
2023-07-27 08:15:00
Ivanti patches second zero-day vulnerability being used in attacks
2023-08-02 15:15:00
[updated] Ivanti Sentry critical vulnerability—don't play dice, patch
2023-08-23 16:30:00
attackerkb
attackerkb
CVE-2023-35078
2023-07-25 00:00:00
CVE-2023-35082
2023-08-15 00:00:00
nuclei
nuclei
Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
2023-07-28 21:38:50
MobileIron Core - Remote Unauthenticated API Access
2023-08-03 16:20:05
cve
cve
CVE-2023-35082
2023-08-15 16:15:11
rapid7blog
rapid7blog
CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile
2023-07-26 16:45:05
What’s New in InsightVM and Nexpose: Q3 2023 in Review
2023-09-29 19:42:26
CVE-2023-35082 - MobileIron Core Unauthenticated API Access Vulnerability
2023-08-02 16:05:47
ics
ics
Threat Actors Exploiting Ivanti EPMM Vulnerabilities
2023-08-01 12:00:00

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2023-35078
prion2githubexploit10nessus2thn7cvelist2cisa_kev2malwarebytes3attackerkb2nuclei2cve1rapid7blog3ics1