high7.2Known exploited
CVE-2023-35081
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-07-31. Federal due date: 2023-08-21.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Endpoint Manager Mobile | from 11.8.0 before 11.8.1.2 from 11.9.0 before 11.9.1.2 from 11.10.0 before 11.10.0.3 |