CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-03
Ivanti EPMM (Endpoint Manager Mobile) Path Traversal and Arbitrary File Write Vulnerability (CVE-2023-35081) Security Advisory
[Affected Scope] Ivanti EPMM versions 11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2, and 11.8.x < 11.8.1.2
[Impact] An authenticated administrator can write arbitrary files to the appliance via path traversal, potentially leading to Remote Code Execution (RCE)
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the admin portal