HIGHCVSS v3.1 7.2Actively exploited · CISA KEV since 2023-07-31Vulnerability
CVE-2023-35081
Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).
Properties
- Vulnerability name
- Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
- Epss score
- 0.63577
- Last seen
- 2026-10-19T12:00:27+00:00
- Year
- 2023
- Due date
- 2023-08-21
- Exploited euvd since
- 2023-07-31T00:00:00+00:00
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2023-07-31
- Score
- 7.2
- Euvd base score version
- 3.0
- Euvd vendor
- Ivanti
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 7.2
- Vendor project
- Ivanti
- Content hash
- 00c363a5627a9534c2c8c25abb43b169edd058070fa68b8976ca5cde26d1b627
- Published at
- 2023-08-03T18:15:11.303
- Euvd updated
- 2026-01-14T14:52:03+00:00
- Last modified
- 2026-06-17T06:04:23.637
- Euvd epss pct
- 63.58
- Epss percentile
- 0.99211
Related Entities (5)
AFFECTS (1)
AFFECTS_PRODUCT (1)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph