CVE-2025-13661 | Ivanti Endpoint Manager - Core Operational Intel

Executive Risk Summary

"A path traversal vulnerability in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended directory, potentially leading to data integrity issues. User interaction is required to exploit this vulnerability."

Operational Audit Arsenal

Target Type File System

Target Asset Ivanti Endpoint Manager installation directory

Standard Path %programfiles%Ivanti\Endpoint Manager

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: Ivanti Endpoint Manager installation directory (File System)
$Targets = 'Ivanti Endpoint Manager installation directory'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Moderate, may require downtime for endpoint manager services

Internal Work Notes

Apply Ivanti Endpoint Manager version 2024 SU4 SR1 or later to mitigate path traversal vulnerability (CVE-2025-13661)

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Official Advisoryhttps://forums.ivanti.com/s/article/Security-Advisory-EPM-December-2025-for-EPM-2024

Related Ivanti Threats

CVE-2024-11639 CVSS 10

Ivanti Cloud Services Application - Admin Web Console

CVE-2025-22467 CVSS 9.9

Ivanti Connect Secure - Connect Secure

CVE-2023-46808 CVSS 9.9

Ivanti Neurons for ITSM - File Upload Component

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.