CVE-2025-9713

Description

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.

PUBLISHED Reserved 2025-08-29 | Published 2025-10-13 | Updated 2025-11-11 | Assigner ivanti

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

References

forums.ivanti.com/...vanti-Endpoint-Manager-EPM-October-2025

cve.org (CVE-2025-9713)

nvd.nist.gov (CVE-2025-9713)

Download JSON