Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

CISA adds second Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairs ()2 min read2
Read at securityaffairs.com
Analyze CVE-2023-35081 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-35081CVE-2023-35078
Tags
cve-2023-35081cve-2023-35078exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-35078
Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII
9.8100%KEVRansomwarePoC
KEV
CVE-2023-35081
Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)
7.264%KEV
KEV

From the original article

2 min read at securityaffairs.com

US CISA added a second actively exploited Ivanti ‘s Endpoint Manager Mobile (EPMM) vulnerability to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added the second actively exploited Ivanti ‘s Endpoint Manager Mobile (EPMM, formerly MobileIron Core) vulnerability, tracked as CVE-2023-35081 , to its Known Exploited Vulnerabilities Catalog .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.