[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAhLcf2nqWR3uDNBYfRek9usyz2DinWa1kTYe2mocSdg":3,"g5a-risk:CVE-2023-35078":141},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":27,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":81,"weaknesses":82,"weaknessesCount":50,"isActivelyExploited":4,"cisaInfo":91,"otxData":27,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":136,"notableEvents":137},"CVE-2023-35078","What is CVE-2023-35078?","An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.","An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without pr...","2023-07-25T07:15:10.897","2025-10-31T21:58:35.65",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":40,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":39},"support@hackerone.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":37,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":38,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",10,6,[],0.99999,[41,41,41,41,41,41,41],"Critical",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"ivanti","endpoint_manager_mobile","*","cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*",1,[52,57,61,67,70,72,74,76,78],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FCVE-2023-35078-Remote-unauthenticated-API-access-vulnerability","Ivanti",[56],"Vendor Advisory",{"url":58,"source":54,"tags":59},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FKB-Remote-unauthenticated-API-access-vulnerability-CVE-2023-35078",[60,56],"Exploit",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Falerts\u002F2023\u002F07\u002F24\u002Fivanti-releases-security-updates-endpoint-manager-mobile-epmm-cve-2023-35078","CISA",[65,66],"Third Party Advisory","US Government Resource",{"url":68,"source":54,"tags":69},"https:\u002F\u002Fwww.ivanti.com\u002Fblog\u002Fcve-2023-35078-new-ivanti-epmm-vulnerability",[56],{"url":53,"source":54,"tags":71},[56],{"url":58,"source":54,"tags":73},[60,56],{"url":62,"source":63,"tags":75},[65,66],{"url":68,"source":54,"tags":77},[56],{"url":79,"source":63,"tags":80},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35078",[66],9,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"shortDescription":87,"requiredAction":87,"vulnerabilityName":87,"dateAdded":27},[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2023-35078? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-35078, a critical severity cyber security vulnerability from 2023. High exploit probability (100.0%). An authentication by...","CVE-2023-35078, CVE-2023-35078 vulnerability, CVE-2023-35078 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ivanti security, endpoint_manager_mobile vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2023-35078",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-35078","Cybersecurity","CVE-2023-35078, CVE-2023-35078 vulnerability, CVE-2023-35078 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":27,"Negate":27,"Nodes":120},[121],{"Operator":122,"Negate":123,"CPEMatch":124},"OR",false,[125,128,132],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":127,"VersionEndIncluding":27},"7C48786C-399D-4B0C-8082-64112C4DA5C4","11.8.1.1",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":130,"VersionEndExcluding":131,"VersionEndIncluding":27},"50C1A12C-5862-48B6-ADA3-4222516DA152","11.9.0","11.9.1.1",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":27},"76DAE9E0-15F0-40AB-8D03-E64423AD0E07","11.10","11.10.0.2",[],[],{"lastModified":11,"cacheTime":139,"version":140},1792229687588,"2.0",{"score":142,"band":43,"action":143,"scoredAt":144},90,"Emergency patch","2026-10-16T06:58:39.754779+00:00"]