CVE coverage
View on NVD →
CVE-2023-35082
CVSS 9.8
Actively exploited (KEV)
3 detections found
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Ivanti EPMM Remote Unauthenticated API Access CVE-2023-35082 | production | 2026-05-13 |
| suricata | ET WEB_SPECIFIC_APPS Possible Ivanti Endpoint Manager Mobile CVE-2023-35082 Check/Exploitation Attempt | rev 2 | 2024-01-18 |
| snort | ET WEB_SPECIFIC_APPS Possible Ivanti Endpoint Manager Mobile CVE-2023-35082 Check/Exploitation Attempt | rev 2 | 2024-01-18 |