CVE-2023-35081
Published 2023-08-03 · Updated 2026-06-17 · Source support@hackerone.com
Summary
CVE-2023-35081 is a high-severity (CVSS 7.2) vulnerability in Ivanti Endpoint Manager Mobile (EPMM). CISA added it to the Known Exploited Vulnerabilities catalog on July 31, 2023, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by August 21, 2023. CISA does not currently list it as used in ransomware campaigns. Ivanti has 38 vulnerabilities in the KEV catalog, 12 of them linked to ransomware.
All 38 known-exploited Ivanti vulnerabilities →Description
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Ivanti — Endpoint Manager Mobile (EPMM)
Name: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Date added: 2023-07-31 · Due: 2023-08-21
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.