- Description
- Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.
- Source
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- NVD status
- Modified
- Products
- endpoint_manager
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- CWE-22
- Hype score
- Not currently trending
Ivanti、Endpoint Managerの2件の高リスク脆弱性を含む13件の脆弱性を修正(CVE-2025-9713,CVE-2025-11622) https://t.co/CFVcdUJYSg #セキュリティ対策Lab #セキュリティ #Security
@securityLab_jp
17 Oct 2025
70 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Ivanti Endpoint Managerに13件の脆弱性。うち2件は特権昇格とRCEを可能にする高深刻度で、残り11件はSQLインジェクション。修正版は11月と2026年Q1に段階配信予定である。 CVE-2025-11622（CVSS 7.8）はローカル認証済み攻
@yousukezan
14 Oct 2025
2166 Impressions
1 Retweet
13 Likes
1 Bookmark
0 Replies
0 Quotes
[CVE-2025-9713: HIGH] Path traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.#cve,CVE-2025-9713,#cybersecurity https://t.co/lSKZvqpJH1 https://t.co/uiRThTD3YO
@CveFindCom
13 Oct 2025
76 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
**CVE-2025-9713** is a path traversal vulnerability in Ivanti Endpoint Manager (formerly known as LANDesk Management Suite). It allows an unauthenticated remote attacker to execute arbitrary code on the affected system by exploiting improper validation of file paths during
@CveTodo
13 Oct 2025
29 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-9713 Path traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. https://t.co/62cfW1BJYk
@CVEnew
13 Oct 2025
266 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7ABDE6FE-56CC-4A46-91F2-2F54C3EC6A75",
"versionEndExcluding": "2024",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
"matchCriteriaId": "6C7283FE-C10A-4E37-B004-15FB0CAC49A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su1:*:*:*:*:*:*",
"matchCriteriaId": "FC51EEA2-1C4C-4069-9704-7ACFE4773930",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su2:*:*:*:*:*:*",
"matchCriteriaId": "E1EF5E1B-9377-49D3-9BE3-62FC78E666A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su3:*:*:*:*:*:*",
"matchCriteriaId": "749AADDA-834D-4EC0-B7FF-E136FD1984F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:su3_security_release_1:*:*:*:*:*:*",
"matchCriteriaId": "698BF7A1-62A1-45B5-BF08-AB3F3AA0245C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]