#VU116836 Path traversal in Endpoint Manager

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU116836

#VU116836 Path traversal in Endpoint Manager

Published: October 8, 2025


Vulnerability identifier: #VU116836
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: N/A
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Endpoint Manager
Software vendor:
Ivanti

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the implementation of the OnSaveToDB method. A remote attacker can trick a victim to open a specilly crafted file and upload arbitrary files on the system, leading to arbitrary code execution.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links