# CVE-2023-35081

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

- Page: https://www.vulneraibility.com/cve/CVE-2023-35081
- CVSS: 7.2
- Known exploited: yes, in CISA KEV since 2023-07-31; CISA due date 2023-08-21
- EPSS: 63.58% (percentile 99.2)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-01-27)
- Weakness: CWE-22
- Published: 2023-08-03

## Affected versions

- Ivanti EPMM: affected < 11.10.0.3

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35081

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.