Ivanti Patches Multiple Security Gaps
Ivanti has released a crucial security update for its Endpoint Manager (EPM) suite to fix four serious vulnerabilities.
The update addresses one critical flaw and three high-severity issues that could allow attackers to take control of systems or steal sensitive data.
The most dangerous vulnerability, rated “Critical” with a score of 9.6, allows attackers to run malicious scripts if an administrator interacts with a compromised session.
The other three “High” severity flaws involve attackers writing harmful files to the server or bypassing security checks.
Fortunately, Ivanti stated that they have not seen anyone using these bugs to attack customers yet. However, users are urged to update their software immediately to stay safe.
The fixes are included in the new version, Ivanti Endpoint Manager 2024 SU4 SR1. All customers using version 2024 SU4 or older should download this update from the Ivanti licensing portal immediately.
| CVE Number | Description | Severity Score |
|---|---|---|
| CVE-2025-10573 | Stored XSS: Allows attackers to run malicious scripts if an admin interacts with them. | Critical (9.6) |
| CVE-2025-13659 | File Writing: Attackers can write harmful files to the server, potentially taking control of it. | High (8.8) |
| CVE-2025-13662 | Signature Bypass: Flaws in how the system checks digital signatures allow bad code to run. | High (7.8) |
| CVE-2025-13661 | Path Traversal: Attackers can write files outside the safe, intended folders. | High (7.1) |
If you cannot patch right away, Ivanti recommends these safety steps:
Ivanti thanked security researchers from the Trend Zero Day Initiative, watchTowr, and Rapid7 for discovering these issues and helping protect customers.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…