High severity7.2CISA KEVNVD Advisory· Published Aug 3, 2023· Updated Jun 17, 2026

CVE-2023-35081

Description

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

Affected products

Ivanti/Endpoint Manager Mobile
cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
Range: >=11.8.0,<11.8.1.2
Ivanti/EPMMllm-fuzzy2 versions
< 11.10.0.3, < 11.9.1.2, < 11.8.1.2+ 1 more
- (no CPE)range: < 11.10.0.3, < 11.9.1.2, < 11.8.1.2
- (no CPE)range: 11.10.0.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-WritenvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.051
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000