H-ISAC TLP White Vulnerability Bulletin Ivanti Patches Four Critical Flaws Affecting Several Products - February 12, 2025

On February 11, 2025, Ivanti issued security updates to fix several vulnerabilities affecting Connect Secure (ICS), Policy Secure (IPS), and Cloud Services Application (CSA). The four most critical flaws in the batch have CVSS scores ranging from 9.1 to 9.9, emphasizing the urgency of patching. Successful exploitation of these flaws could allow threat actors to execute arbitrary code or write arbitrary files. View the details below.