CVE-2025-9713

High · 8.8

CVSS

8.8

EPSS

15.3%

Published

Oct 13, 2025

CISA due date

—

The record

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.

Affected packages

Ecosystem	Package	Introduced	Fixed