Vulnerability Details CVE-2023-35084
Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.0%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-35084
-
cpe:2.3:a:ivanti:endpoint_manager:2016.4
-
cpe:2.3:a:ivanti:endpoint_manager:2017.1
-
cpe:2.3:a:ivanti:endpoint_manager:2017.3
-
cpe:2.3:a:ivanti:endpoint_manager:2018.1
-
cpe:2.3:a:ivanti:endpoint_manager:2018.3
-
cpe:2.3:a:ivanti:endpoint_manager:2019.1
-
cpe:2.3:a:ivanti:endpoint_manager:2020.1
-
cpe:2.3:a:ivanti:endpoint_manager:2020.1.1
-
cpe:2.3:a:ivanti:endpoint_manager:2021.1
-
cpe:2.3:a:ivanti:endpoint_manager:2021.1.1
-
cpe:2.3:a:ivanti:endpoint_manager:2022
-
cpe:2.3:a:ivanti:endpoint_manager:7.9.1.285