Security Alert (A25-12-10): Multiple Vulnerabilities in Ivanti Endpoint Manager

Description:

I Ivanti has released security advisories to address multiple vulnerabilities in Ivanti Endpoint Manager Mobile. Detailed information about the vulnerabilities can be found at:
https://forums.ivanti.com/s/article/Security-Advisory-EPM-December-2025-for-EPM-2024

Affected Systems:

• Ivanti Endpoint Manager (EPM) versions prior to 2024 SU4

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, tampering or security restriction bypass on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://forums.ivanti.com/s/article/Security-Advisory-EPM-December-2025-for-EPM-2024
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10573
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13659 (to CVE-2025-13662)