Ivanti security advisory (AV25-405)

Serial number: AV25-405
Date: July 8, 2025

On July 8, 2025, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Connect Secure (ICS) – version 22.7R2.7 and prior
• Ivanti Endpoint Manager – version 2022 SU8 and prior
• Ivanti Endpoint Manager – version 2024 SU2 and prior
• Ivanti Endpoint Manager Mobile – version 12.5.0.1 and prior
• Ivanti Endpoint Manager Mobile – version 12.4.0.2 and prior
• Ivanti Endpoint Manager Mobile – version 12.3.0.2 and prior
• Ivanti Policy Secure (IPS) – version 22.7R1.4 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-6770, CVE-2025-6771)
• Security Advisory July 2025 for Ivanti EPM 2024 SU2 and EPM 2022 SU8
• July Security Advisory Ivanti Connect Secure and Ivanti Policy Secure (Multiple CVEs)
• Ivanti Security Advisories