CVE Watch—

CVE-2023-35081

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

63.6%

p99

KEV

SIM

31 de jul. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

63.6%EPSS · 30 dias63.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Ivanti / Endpoint Manager Mobile (EPMM)

Vulnerabilidade

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Adicionado ao KEV

31 de jul. de 2023

Corrigir até

21 de ago. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2023-35081

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-69737.2 ALT

98.4%

KEV—80Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability10d CVE-2023-350789.8 CRÍ

100.0%

KEV—80Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability93d CVE-2025-4427—

100.0%

KEV—80Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability—CVE-2026-1340—

99.9%

KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2026-1281—

99.9%

KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—CVE-2025-4428—

99.8%

KEV—80Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability—