Ref# ADV2025_189 | Date: Jul 15th 2025

---

Ivanti has published a security advisory highlighting vulnerabilities in the following products on July 8th, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• Ivanti Connect Secure (ICS) – version 22.7R2.7 and prior 
• Ivanti Endpoint Manager – version 2022 SU8 and prior 
• Ivanti Endpoint Manager – version 2024 SU2 and prior 
• Ivanti Endpoint Manager Mobile – version 12.5.0.1 and prior 
• Ivanti Endpoint Manager Mobile – version 12.4.0.2 and prior 
• Ivanti Endpoint Manager Mobile – version 12.3.0.2 and prior 
• Ivanti Policy Secure (IPS) – version 22.7R1.4 and prior 

For more information on these updates, you can follow these URLs: 

• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-6770, CVE-2025-6771) 
• Security Advisory July 2025 for Ivanti EPM 2024 SU2 and EPM 2022 SU8 
• July Security Advisory Ivanti Connect Secure and Ivanti Policy Secure (Multiple CVEs) 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.

PDF Download: Ivanti Security Advisory

References 

• Ivanti Security Advisories. (July 8th, 2025). Retrieved from Ivanti. https://forums.ivanti.com/s/searchallcontent?language=en_US#tab=All&sortCriteria=date%20descending&f-sfkbknowledgearticletypec=Security%20Advisory 
• Ivanti Security Advisory. (July 8th, 2025). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av25-405