Critical Vulnerability Information Vulnerability Overview Announcement Date: September 9, 2025 Product: Ivanti Endpoint Manager (EPM) Affected Versions: - EPM 2024 SU3 and earlier versions - EPM 2022 SU8 Security Update 1 and earlier versions Fixed Versions: - EPM 2024 SU3 Security Update 1 - EPM 2022 SU8 Security Update 2 Vulnerability Details Remediation These vulnerabilities have been resolved in the latest versions of the product and are available for download via the download portal (login required). The EPM 2022 branch will reach end-of-life at the end of October 2025. Frequently Asked Questions Are there any known exploitation activities? - No customer exploitation incidents related to these vulnerabilities have been identified at this time. How can I determine if I’ve been compromised? - There are no known public exploits at this time, but you can review the list of indicators of compromise. What if I need assistance? - You can submit a case via the Success Portal or request phone support.