Ivanti security advisory (AV25-022)

From: Canadian Centre for Cyber Security

Serial number: AV25-022
Date: January 15, 2024

Between January 9 and 14, 2025, Ivanti published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

  • Ivanti Avalanche – versions prior to 6.4.7
  • Ivanti Application Control – versions prior to 2024.3 HF1, 2024.1 HF4 and 2023.3 HF3
  • Ivanti Endpoint Manager – versions prior to EPM 2024 January-2025 Security Update, EPM 2022 SU6 January-2025 Security Update
  • Ivanti Security Controls – versions prior to 2024

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Date modified: