← Back to browse · API

CVE-2023-35081

Severity
HIGH
CVSS
7.2
EPSS
0.63577
Risk score
76.05
CISA KEV
Yes
PoC
No
Published
2023-07-31
Modified
2023-07-31
First seen
2026-08-07
Aliases
EUVD-2023-39116, GHSA-8CJR-8GR7-CCG3
Products
Ivanti:EPMM 11.10.0.3 <11.10.0.3, Ivanti:Endpoint Manager Mobile (EPMM)
Sources
euvd EUVD-2023-39116
cisa.gov CVE-2023-35081

Description

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

References