AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-35082

CRITICAL · CVSS 9.8 EPSS 100.00% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-08-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Known

Added to KEV: 2024-01-18

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE
CVE-2023-35082
Severity
CRITICAL
CVSS
9.8
EPSS
100.00%
Ivanti

Original NVD Description

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.