6.5 Medium

CVE-2025-8310 Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9…

Description

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password

Affected products and versions

Product	Affected versions	Fixed in
Virtual Application Delivery ControllerCWE-862 22.9	earliest → < 22.9	22.9

Do you use Virtual Application Delivery ControllerCWE-862?

Track this CVE Watch Virtual Application Delivery ControllerCWE-862 Check my SBOMs

www.cveye.io/en/cve/CVE-2025-8310

Timeline

Published August 12, 2025
Last modified February 26, 2026

References

forums.ivanti.com forums.ivanti.com

Track this CVE