Ivanti Policy Secure vulnerabilities

CVEs per yearBy the year they were published

1. 202422
2. 202530

Known exploitedNewest addition to KEV first

• CVE-2025-22457

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before…

  Ivanti · Connect Secure

  ExploitedCritical9.0
• CVE-2025-0282

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA…

  Ivanti · Connect Secure

  ExploitedCritical9.0

Newest CVEs

• CVE-2025-55144

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  Medium5.4
• CVE-2025-55143

  Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  Medium6.1
• CVE-2025-55142

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  High8.8
• CVE-2025-55141

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  High8.8
• CVE-2025-55139

  SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…

  Ivanti · Connect Secure

  Medium6.8
• CVE-2025-55148

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  High7.6
• CVE-2025-55147

  CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…

  Ivanti · Connect Secure

  High8.8
• CVE-2025-55146

  An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure

  Medium4.9
• CVE-2025-55145

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

  Ivanti · Connect Secure 22.7R2.9

  High8.9
• CVE-2025-8711

  CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for…

  Ivanti · Connect Secure

  Medium5.4