Veille CVE

Août 2023

3 CVE

  1. CVE-2023-35082 9.8 Critique Exploitée Rançongiciel

    Ivanti EPMM · Ivanti endpoint manager mobile

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

  2. CVE-2022-48503 8.8 Élevée Exploitée

    Apple macOS · Apple tvOS · Apple Safari · Apple watchOS

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

  3. CVE-2023-35081 7.2 Élevée Exploitée

    Ivanti EPMM · Ivanti endpoint manager mobile

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.