CVE-2023-35082
Published Aug 15, 2023
Last updated a year ago
- Description
- An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
- Source
- support@hackerone.com
- NVD status
- Analyzed
- Products
- endpoint_manager_mobile
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 3.0
- Type
- Secondary
- Base score
- 10
- Impact score
- 6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
Data from CISA
- Vulnerability name
- Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
- Exploit added on
- Jan 18, 2024
- Exploit action due
- Feb 8, 2024
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- nvd@nist.gov
- CWE-287
- Hype score
- Not currently trending
🔒 #CyberSecurity CVE-2023-35082: Ivanti EPMM Exploitation — Detection and Hardening Guide "Active exploitation of Ivanti EPMM (CVE-2023-35082) allows unauthenticated RCE. Immediate patching…" 🔗 https://t.co/IpTr3BPWiw #CyberSecurity #ThreatIntel #cve #zeroday #patch
@SecurityAr58409
8 May 2026
47 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Fortinet urges patch for critical FortiClient EMS RCE (CVE-2024-21762, CVSS 9.3). CISA added Ivanti EPMM vuln (CVE-2023-35082, CVSS 9.8) to KEV catalog, requiring patch by May 23 due to active exploitation. (May 17) (263 characters)
@AnonNews_irc
26 Dec 2025
88 Impressions
0 Retweets
1 Like
0 Bookmarks
1 Reply
0 Quotes
[MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (26 juillet 2023) — \[Mise à jour du 15 septembre 2023\] Correction de la vulnérabilité CVE-2023-35082 Le 21 août 2023, l'éditeur a publié une mise à jour du bulletin complémentaire de sécurité \[3\
@RotateKeys
7 Nov 2025
1 Impression
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AADAED7D-CD58-482D-B419-8146852F0387",
"versionEndExcluding": "11.11.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]