CVE-2023-39337 - CVE House
Back to Database
Status published Unknown CVE-2023-39337

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8...

Vulnerability Description

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39337

Credits & Attribution

No credits recorded in the NVD database.

References

More from Ivanti

View All →
CVE-2025-9872
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3...
High 8.8
CVE-2025-9713
Path traversal in Ivanti Endpoint Manager before version 2024 SU4...
High 8.8
CVE-2025-9712
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3...
High 8.8
CVE-2025-8712
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2,...
Medium 5.4
CVE-2025-8711
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti...
Medium 5.4

Affected Vendor

Affected Software

EPMM
Vulnerable Versions:
11.10.0.0, 11.9.0.0, 11.8.0.0

Timeline

Official Publish: November 14th, 2023
Last Modified: August 29th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.