CVE-2023-46808

CRITICAL

An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the...

Affects 1 product across 1 vendor.

CVSS 3.19.9
EPSS2.0%
Percentile80th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-434: Unrestricted Upload of File with Dangerous Type

Application allows file uploads without validating type, enabling upload of executable code or web shells.

Related Attack Patterns (CAPEC)
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
via CWE-434

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A critical file upload vulnerability in Ivanti ITSM versions prior to 2023.4 allows authenticated remote users to upload files to the server, potentially leading to command execution with non-root privileges.

BSID: BS-2024-GLOBAL-050774-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-46808?
A critical file upload vulnerability in Ivanti ITSM versions prior to 2023.4 allows authenticated remote users to upload files to the server, potentially leading to command execution with non-root privileges.
What is the CVSS score for CVE-2023-46808?
CVE-2023-46808 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 2.0%.
Is CVE-2023-46808 actively exploited?
No confirmed active exploitation of CVE-2023-46808 as of 2026-09-25.
How do I remediate CVE-2023-46808?
Priority: IMMEDIATE. Advisory: https://forums.ivanti.com/s/article/SA-CVE-2023-46808-Authenticated-Remote-File-Write-for-Ivanti-Neurons-for-ITSM PSIRT: [email protected]
What systems are affected by CVE-2023-46808?
CVE-2023-46808 affects Ivanti Neurons For Itsm.
Vulnerability Details
CVE IDCVE-2023-46808
BSIDBS-2024-GLOBAL-050774-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2024-03-31
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Unrestricted Upload of File with Dangerous Type
SourceNVD
Official Description

An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from improper validation of file uploads, enabling an attacker to upload malicious files that can be executed on the server.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Ivanti Neurons For Itsm < 2023.4
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 929 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash638577c5201a7f906d958eaf55d7177a90ebbc0ed077f8d8719f03a030875697438bea0aaff818eb61009980f496019b649e018f4436e122ac662f4d452038de
Related CVEs affecting Ivanti
CVE-2026-10520 10.0 An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R1... CVE-2021-22893 10.0 Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authenticatio... CVE-2016-4787 10.0 Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0... CVE-2019-11510 10.0 In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.... CVE-2020-13774 9.9 An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpo...
View all Ivanti CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →