Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-35078
HistoryJul 25, 2023 - 7:15 a.m.

CVE-2023-35078

2023-07-2507:15:10
CWE-287
[email protected]
web.nvd.nist.gov
1
ivanti epmm
authentication bypass
unauthorized access
restricted functionality

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

Affected configurations

NVD
Node
ivantiendpoint_manager_mobileRange≤11.10

Related

prion 2
githubexploit 10
nessus 2
attackerkb 2
cisa_kev 2
malwarebytes 3
nuclei 2
cvelist 2
thn 7
cve 2
rapid7blog 3
nvd 1
ics 1
prion
prion
Authentication flaw
2023-07-25 07:15:00
Authentication flaw
2023-08-15 16:15:00
githubexploit
githubexploit
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2023-07-31 02:24:24
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2023-08-04 07:08:06
Exploit for Improper Authentication in Ivanti Endpoint Manager Mobile
2024-03-29 14:15:49
nessus
nessus
Ivanti Endpoint Manager Mobile Remote Unauthenticated API Access (CVE-2023-35078)
2023-08-01 00:00:00
Ivanti Endpoint Manager Mobile < 11.8.1.1 / 11.9.x < 11.9.1.1 / 11.10.x < 11.10.0.2 Remote Unauthenticated API Access (CVE-2023-35078)
2023-07-25 00:00:00
attackerkb
attackerkb
CVE-2023-35078
2023-07-25 00:00:00
CVE-2023-35082
2023-08-15 00:00:00
cisa_kev
cisa_kev
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
2023-07-25 00:00:00
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
2023-07-31 00:00:00
malwarebytes
malwarebytes
Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild
2023-07-27 08:15:00
Ivanti patches second zero-day vulnerability being used in attacks
2023-08-02 15:15:00
[updated] Ivanti Sentry critical vulnerability—don't play dice, patch
2023-08-23 16:30:00
nuclei
nuclei
Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
2023-07-28 21:38:50
MobileIron Core - Remote Unauthenticated API Access
2023-08-03 16:20:05
cvelist
cvelist
CVE-2023-35078
2023-07-25 06:08:38
CVE-2023-35082
2023-08-15 15:11:56
thn
thn
Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation
2023-07-25 03:51:00
Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability
2023-08-02 03:41:00
Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack
2023-07-29 04:27:00
cve
cve
CVE-2023-35078
2023-07-25 07:15:10
CVE-2023-35082
2023-08-15 16:15:11
rapid7blog
rapid7blog
CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile
2023-07-26 16:45:05
What’s New in InsightVM and Nexpose: Q3 2023 in Review
2023-09-29 19:42:26
CVE-2023-35082 - MobileIron Core Unauthenticated API Access Vulnerability
2023-08-02 16:05:47
nvd
nvd
CVE-2023-35082
2023-08-15 16:15:11
ics
ics
Threat Actors Exploiting Ivanti EPMM Vulnerabilities
2023-08-01 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2023-35078
prion2githubexploit10nessus2attackerkb2cisa_kev2malwarebytes3nuclei2cvelist2thn7cve2rapid7blog3nvd1ics1