Skip to contentIvanti Zero Trust Access Gateway vulnerabilities
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551445.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreReflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551436.1 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551428.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551418.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreSSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551396.8 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551487.6 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551478.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreAn unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy...CVE-2025-551464.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551458.9 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-87115.4 Medium
- ivanti connect secure before, connect secure, neurons for secure access +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-87125.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...CVE-2025-54685.5 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,...CVE-2025-54664.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...CVE-2025-54627.5 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti...CVE-2025-54567.5 High
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy...CVE-2025-22457In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure, ivant ics +2 more +4 moreAn XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x,...CVE-2024-22024Public exploitEPSS 94.7%8.3 High