CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-15
Ivanti EPMM (formerly MobileIron Core) Authentication Bypass and Remote Code Execution Vulnerability (CVE-2023-35082) Urgent Security Advisory
[Affected Scope] Ivanti EPMM (Endpoint Manager Mobile) 11.10 and older, and MobileIron Core 11.2 and older
[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, compromise sensitive data, or execute arbitrary commands
[Mitigation] Immediately upgrade to the latest supported release and restrict external access to administrative API endpoints