Skip to content
fr Sign in

Vulnerabilities of Ivanti ZTA Gateway

Is your version affected?

CVE list

CVE Summary Score Published
CVE-2025-55144 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 5.4 Medium Sep 9, 2025
CVE-2025-55143 Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,… 6.1 Medium Sep 9, 2025
CVE-2025-55142 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 8.8 High Sep 9, 2025
CVE-2025-55141 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 8.8 High Sep 9, 2025
CVE-2025-55139 SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 6.8 Medium Sep 9, 2025
CVE-2025-55148 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 7.6 High Sep 9, 2025
CVE-2025-55147 CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 8.8 High Sep 9, 2025
CVE-2025-55146 An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,… 4.9 Medium Sep 9, 2025
CVE-2025-55145 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 8.9 High Sep 9, 2025
CVE-2025-8711 CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 5.4 Medium Sep 9, 2025
CVE-2025-8712 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 5.4 Medium Sep 9, 2025
CVE-2025-5468 Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure… 5.5 Medium Aug 12, 2025
CVE-2025-5466 XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway… 4.9 Medium Aug 12, 2025
CVE-2025-5462 A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,… 7.5 High Aug 12, 2025
CVE-2025-5456 A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before… 7.5 High Aug 12, 2025

Other Ivanti products

Avalanche 93 Endpoint Manager 71 Connect Secure 65 Policy Secure 52 endpoint_manager 45 EPM 33 connect_secure 24 policy_secure 20 Endpoint Manager Mobile 19 Secure Access Client 15 Neurons for Secure Access 13 EPMM 11