VYPR
← All advisories
Unrated severityCISA KEVNVD Advisory· Published Aug 3, 2023· Updated Jan 14, 2026

CVE-2023-35081

CVE-2023-35081

Description

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

Affected products

2
  • Ivanti/EPMMllm-fuzzy2 versions
    >=11.8.0, <11.8.1.2 or >=11.9.0, <11.9.1.2 or >=11.10.0, <11.10.0.3+ 1 more
    • (no CPE)range: >=11.8.0, <11.8.1.2 or >=11.9.0, <11.9.1.2 or >=11.10.0, <11.10.0.3
    • (no CPE)range: 11.10.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.