Zurück zur CVE-Übersicht
CVE-2023-35078
CRITICAL(9.8)KEV — Aktiv ausgenutztCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk Signal Score84/100 — KRITISCH
- CVSS 9.8 — Kritisch
- EPSS 100% — sehr wahrscheinlich ausgenutzt
- Im CISA KEV-Katalog (aktiv ausgenutzt)
CISA KEV
Bestätigt ausgenutzt
EPSS-Score
100%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
9.8
Technische Schwere
Beschreibung
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
Referenzen
- https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-ac...
- https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulnera...
- https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-upda...
- https://www.ivanti.com/blog/cve-2023-35078-new-ivanti-epmm-vulnerability
- https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-ac...
- https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulnera...
- https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-upda...
- https://www.ivanti.com/blog/cve-2023-35078-new-ivanti-epmm-vulnerability
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-...