Security Advisory Ivanti Endpoint Manager (EPM) October 2025

Security Advisory Ivanti Endpoint Manager EPM October 2025 Multiple CVEs Summary Update Nov. 11, 2025: A fix has been released for CVE-2025-11622 and CVE-2025-9713. To resolve these vulnerabilities customers should update to EPM 2024 SU4. Update Feb. 10, 2026: A fix to resolve the remaining CVE's...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-54811

creationtimestamp| type| source ---|---|--- 2024-12-12 18:28:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113641267578732747 2024-12-12 21:21:57+00:00| seen| https://t.me/cvedetector/12806...

CVE-2024-49132

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:52:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113630744569872163 2024-12-12 08:16:06+00:00| seen|...

CVE-2024-49125

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:59:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113630061682240441 2024-12-10 21:37:41+00:00| seen|...

CVE-2024-49128

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:52:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113630744521303025 2024-12-13 11:17:44+00:00| seen|...

CVE-2024-49082

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:07:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113630094912090814 2024-12-11 05:00:00+00:00| seen|...

CVE-2024-49126

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 21:37:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113630685503323940 2024-12-11 12:26:56+00:00| seen|...

Important Photon OS Security Update - PHSA-2024-3.0-0806

Updates of 'postgresql13' packages of Photon OS have been released...

CVE-2024-49017

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:56:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113472213241497289...

CVE-2024-49001

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 20:56:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113471977064992758...

CVE-2024-49008

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:26:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113472095146486951...

CVE-2024-38255

creationtimestamp| type| source ---|---|--- 2024-11-12 17:55:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113471268455356571 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review...

June 11, 2024—KB5039260 (Monthly Rollup)

June 11, 2024—KB5039260 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all Subset of endpoints for ESU only are...

May 14, 2024—KB5037763 (OS Build 14393.6981) - EXPIRED

May 14, 2024—KB5037763 OS Build 14393.6981 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. --- 11/19/20 For...

January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED

January 9, 2024—KB5034119 OS Build 14393.6614 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. --- 11/19/20 For...

March 12, 2024—KB5035855 (OS Build 14393.6796) - EXPIRED

March 12, 2024—KB5035855 OS Build 14393.6796 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. --- NEW 3/22/24...

February 13, 2024—KB5034830 (Monthly Rollup)

February 13, 2024—KB5034830 Monthly Rollup IMPORTANT The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all Subset of endpoints for ESU only...