CVE-2023-35081

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-35081
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US Vendor Advisory
https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
History

31 Oct 2025, 21:58

Type Values Removed Values Added
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081 - US Government Resource

21 Oct 2025, 23:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081 -

21 Oct 2025, 20:19

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:20

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de path traversal en las versiones de Ivanti EPMM (11.10.x &lt; 11.10.0.3, 11.9.x &lt; 11.9.1.2 y 11.8.x &lt; 11.8.1.2) permite que un administrador autenticado escriba archivos arbitrarios en el dispositivo.
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081 -

21 Nov 2024, 08:07

Type Values Removed Values Added
References () https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US - Vendor Advisory () https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US - Vendor Advisory

08 Aug 2023, 20:25

Type Values Removed Values Added
CPE cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.2
References (MISC) https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US - (MISC) https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US - Vendor Advisory
First Time Ivanti endpoint Manager Mobile
Ivanti
CWE CWE-22

03 Aug 2023, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-08-03 18:15

Updated : 2025-10-31 21:58

NVD link : CVE-2023-35081

Mitre link : CVE-2023-35081

CVE.ORG link : CVE-2023-35081

JSON object : View

Products Affected

ivanti

  • endpoint_manager_mobile
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')