CVE-2025-9713
Published: 13 October 2025
Summary
CVE-2025-9713 is a high-severity Path Traversal (CWE-22) vulnerability in Ivanti Endpoint Manager. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Flaw remediation through patching Ivanti Endpoint Manager to version 2024 SU4 directly eliminates the path traversal vulnerability enabling RCE.
Information input validation at application boundaries directly prevents path traversal exploitation (CWE-22) by rejecting malformed path inputs.
Vulnerability scanning identifies the path traversal flaw in Ivanti Endpoint Manager prior to exploitation, enabling timely patching.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Path traversal vulnerability in public-facing Ivanti Endpoint Manager enables remote unauthenticated RCE via exploitation of public-facing application.
NVD Description
Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.
Deeper analysisAI
CVE-2025-9713 is a path traversal vulnerability (CWE-22) in Ivanti Endpoint Manager versions prior to 2024 SU4. Published on 2025-10-13, it allows a remote unauthenticated attacker to achieve remote code execution, with user interaction required. The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
A remote unauthenticated attacker can exploit this over the network with low attack complexity and no required privileges. Exploitation necessitates user interaction, enabling the attacker to achieve high impacts on confidentiality, integrity, and availability within the affected scope.
Mitigation details are available in the Ivanti Security Advisory at https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025.
Details
- CWE(s)