CVE-2023-35082

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-08-15

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

Affected Platforms (CPE)

📦

Ivanti

Endpoint Manager Mobile

< 11.11.0

References & Advisories

🔗 https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35082

Vulnerability Description

Affected Platforms (CPE)

Endpoint Manager Mobile

References & Advisories

相关漏洞威胁