Zero Trust Access Gateway (Ivanti) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2025-09-09. Vendor: Ivanti.
CVEs of Zero Trust Access Gateway
- CVE-2025-8711 - CVSS 5.4 (medium), 2025-09-09: CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…
- CVE-2025-55148 - CVSS 7.6 (high), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55147 - CVSS 8.8 (high), 2025-09-09: CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…
- CVE-2025-8712 - CVSS 5.4 (medium), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and…
- CVE-2025-55146 - CVSS 4.9 (medium), 2025-09-09: An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55142 - CVSS 8.8 (high), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55145 - CVSS 8.9 (high), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55144 - CVSS 5.4 (medium), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55143 - CVSS 6.1 (medium), 2025-09-09: Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55141 - CVSS 8.8 (high), 2025-09-09: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…
- CVE-2025-55139 - CVSS 6.8 (medium), 2025-09-09: SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…
- CVE-2025-5468 - CVSS 5.5 (medium), 2025-08-12: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway…
- CVE-2025-5466 - CVSS 4.9 (medium), 2025-08-12: XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for…
- CVE-2025-5456 - CVSS 7.5 (high), 2025-08-12: A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before…
- CVE-2025-5462 - CVSS 7.5 (high), 2025-08-12: A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723…
- CVE-2025-22457 - CVSS 9.8 (critical), 2025-04-03: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before…
- CVE-2024-22024 - CVSS 8.3 (high), 2024-02-13: An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways…
