Ivanti’s Comedy of Errors: Four Critical Flaws Exposed in Latest Security Updates!
Ivanti has released security updates to fix several vulnerabilities affecting Endpoint Manager (EPM), including four critical bugs rated 9.8 out of 10 on the CVSS scale. These flaws could allow remote attackers to leak sensitive information. Users are urged to update to the latest EPM versions to stay protected.

Hot Take:
Ivanti’s latest security update is like a digital band-aid for the high-risk boo-boos of Endpoint Manager. With a CVSS score of 9.8 out of 10, these vulnerabilities are practically begging for a hacker’s attention. Don’t worry though, Ivanti’s new mantra is “Patch first, ask questions later!”
Key Points:
- Ivanti addresses critical flaws in Avalanche, Application Control Engine, and Endpoint Manager.
- Four critical bugs in EPM rated 9.8 on the CVSS scale could lead to information disclosure.
- Vulnerabilities affect EPM versions before the 2024 January-2025 Security Update.
- No evidence of the flaws being exploited in the wild, as per Ivanti.
- SAP also released fixes for two critical vulnerabilities with a CVSS score of 9.9.
Already a member? Log in here