CVE-2023-35081: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Beschrijving (NVD, Engels)

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij Ivanti

• CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
• CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
• CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability
• CVE-2026-6973: Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.