CVE-2023-35084

Summary

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://forums.ivanti.com/s/article/SA-2023-08-08-CVE-2023-35084?language=en_US

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://forums.ivanti.com/s/article/SA-2023-08-08-CVE-2023-35084?language=en_US

• ←Previous
• Next→