Exploited Vulnerabilities DailyCVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core
EPSS99.9%No. 28 of 1739 in KEV
CVE year2023~1 yrs before listing
Same vendor in KEV35
Same product1
| Field | Value |
|---|---|
| Vendor | Ivanti |
| Product | Endpoint Manager Mobile (EPMM) and MobileIron Core |
| Name | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability |
| Added to KEV | 2024-01-18 |
| US federal due date | 2024-02-08 |
| Ransomware use | Known |
| CWE | CWE-287 |
CISA description
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-01-18.