IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.2Hoch KEV

CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Ivanti EPMM Veröffentlicht: (vor 3 Jahren)

Bekannt ausgenutzt — Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

CISA hat am 31.07.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 21.08.2023.

Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2023-35081

Beschreibung

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

Schwachstellentyp (CWE): CWE-22

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
ivanti endpoint manager mobile 11.8.0 – < 11.8.1.2
Ivanti EPMM 11.10.0.3 – < 11.10.0.3

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:* ≥ 11.8.0 < 11.8.1.2
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:* ≥ 11.9.0 < 11.9.1.2
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:* ≥ 11.10.0 < 11.10.0.3

Neue CVEs im selben Produkt — Ivanti (Connect Secure, EPMM…)

4.9Mittel
CVE-2026-83528
Ivanti Endpoint Manager Mobile

Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.

5.5Mittel
CVE-2026-107405
Ivanti Endpoint Manager Mobile

An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.

4.9Mittel
CVE-2026-107404
Ivanti Endpoint Manager Mobile

Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.

4.9Mittel
CVE-2026-105427
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.

6.7Mittel
CVE-2026-105426
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.

5.5Mittel
CVE-2026-123181
Ivanti Sentry

A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.