Vulnerability Details CVE-2023-35083
Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.7%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2023-35083
-
cpe:2.3:a:ivanti:endpoint_manager:2016.4
-
cpe:2.3:a:ivanti:endpoint_manager:2017.1
-
cpe:2.3:a:ivanti:endpoint_manager:2017.3
-
cpe:2.3:a:ivanti:endpoint_manager:2018.1
-
cpe:2.3:a:ivanti:endpoint_manager:2018.3
-
cpe:2.3:a:ivanti:endpoint_manager:2019.1
-
cpe:2.3:a:ivanti:endpoint_manager:2020.1
-
cpe:2.3:a:ivanti:endpoint_manager:2020.1.1
-
cpe:2.3:a:ivanti:endpoint_manager:2021.1
-
cpe:2.3:a:ivanti:endpoint_manager:2021.1.1
-
cpe:2.3:a:ivanti:endpoint_manager:2022
-
cpe:2.3:a:ivanti:endpoint_manager:7.9.1.285