PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-35081 Ivanti CVE debrief

CVE-2023-35081 is a path traversal vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM). It was added to CISA’s Known Exploited Vulnerabilities catalog on 2023-07-31, which means defenders should treat it as an actively exploited issue rather than a routine disclosure. The CISA KEV record directs organizations to apply vendor mitigations or discontinue use of the product if mitigations are unavailable.

Vendor
Ivanti
Product
Endpoint Manager Mobile (EPMM)
CVSS
HIGH 7.2
CISA KEV
Listed
Original CVE published
2023-07-31
Original CVE updated
2023-07-31
Advisory published
2023-07-31
Advisory updated
2023-07-31

Who should care

Organizations running Ivanti Endpoint Manager Mobile (EPMM), especially security, infrastructure, and mobile device management teams responsible for patching, hardening, and internet-facing service exposure.

Technical summary

The supplied records identify the issue as a path traversal vulnerability in Ivanti Endpoint Manager Mobile (EPMM). The CISA KEV entry marks it as known exploited and references vendor instructions as the required response. No CVSS score was supplied in the corpus.

Defensive priority

High. CISA added this CVE to the Known Exploited Vulnerabilities catalog on the publication date, so exposure should be assumed to be urgent until mitigations are in place.

Recommended defensive actions

  • Check whether Ivanti Endpoint Manager Mobile (EPMM) is deployed anywhere in your environment.
  • Review and apply vendor-provided mitigations or fixes referenced by Ivanti and CISA.
  • If mitigations are unavailable, follow CISA guidance to discontinue use of the product until a safe remediation path exists.
  • Prioritize externally reachable or internet-facing EPMM instances for verification and containment.
  • Confirm asset inventory, patch status, and any compensating controls for EPMM systems.
  • Monitor for indicators of abnormal access or unauthorized file/path handling on affected systems.

Evidence notes

The CVE record and NVD link identify the vulnerability as CVE-2023-35081 for Ivanti Endpoint Manager Mobile (EPMM). The CISA KEV source item states the issue is known exploited, gives a date added of 2023-07-31, and instructs defenders to apply vendor mitigations or discontinue use if mitigations are unavailable. No additional technical detail beyond the path traversal classification was supplied in the corpus.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-35081 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-35081

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-35081 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-35081

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

    cisa_kev

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.