Back to the CVE list
CVE-2023-35078 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in Ivanti Endpoint Manager Mobile

CVSS score

10.0

EPSS probability

%100.0

Risk score

20.0

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

This tool is built in golang language to exploit CVE-2023-35078 vulnerability inspired by similar tool in python language https://github.com/vchan-in/CVE-2023-35078-Exploit-POC (★1)

Public PoCSource updated: 31.07.2023 14:45:03

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC (★0)

Public PoCSource updated: 29.07.2023 14:07:37

Proof of concept script to check if the site is vulnerable to CVE-2023-35078 (★0)

Public PoCSource updated: 30.07.2023 05:07:53

Easy and non-intrusive script to check for CVE-2023-35078 (★0)

Public PoCSource updated: 01.08.2023 03:22:26

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core (★0)

Public PoCSource updated: 02.08.2023 00:44:35

Ivanti Endpoint Manager Mobile exploit (★0)

Public PoCSource updated: 04.08.2023 16:30:52

Ivanti Endpoint Manager Mobile (EPMM) POC (★0)

Public PoCSource updated: 30.08.2023 11:36:28

CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core. (★0)

Public PoCSource updated: 29.03.2024 23:45:31

Nuclei: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass

Exploit reference

Tools to scanner & exploit cve-2023-35078

Public PoC

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-35078"