AdvisorycriticalExploited in the wild

US CISA warns of actively exploited Ivanti EPMM flaw CVE-2023

Security Affairsby @securityaffairsJan 19, 2024 · 14:14 UTC (Jan 19, 2024)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-35082 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35082 CVE-2023-35078

Tags: cve-2023-35082 cve-2023-35078 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35082	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core	9.8	100%	KEVRansomware	Aug 15, 2023 KEV Jan 18, 2024

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti EPMM flaw CVE-2023-35082 to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.