Advisories · Technology

Ivanti ZTA Gateway.

Every CVE that names Ivanti ZTA Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-55144 CVE record

CVSS 5.4 Medium

Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-55143 CVE record

CVSS 6.1 Medium

Cross-site scripting in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-55142 CVE record

CVSS 8.8 High

Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-55141 CVE record

CVSS 8.8 High

Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-55139 CVE record

CVSS 6.8 Medium

Server-side request forgery in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Server-side request forgery (SSRF)
Not analysed yet 9 Sept 2025
CVE-2025-55148 CVE record

CVSS 7.6 High

Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-55147 CVE record

CVSS 8.8 High

Cross-site request forgery in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Cross-site request forgery (CSRF)
Not analysed yet 9 Sept 2025
CVE-2025-55146 CVE record

CVSS 4.9 Medium

Unchecked return value in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-252
Not analysed yet 9 Sept 2025
CVE-2025-55145 CVE record

CVSS 8.9 High

Missing authorization in Ivanti Connect Secure 22.7R2.9 and others
- Ivanti Connect Secure 22.7R2.9
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-8711 CVE record

CVSS 5.4 Medium

Cross-site request forgery in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Cross-site request forgery (CSRF)
Not analysed yet 9 Sept 2025
CVE-2025-8712 CVE record

CVSS 5.4 Medium

Missing authorization in Ivanti Connect Secure before and others
- Ivanti Connect Secure before
- Ivanti Policy Secure
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-5468 CVE record

CVSS 5.5 Medium

Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-61
Not analysed yet 12 Aug 2025
CVE-2025-5466 CVE record

CVSS 4.9 Medium

XML entity expansion in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Denial of service
Not analysed yet 12 Aug 2025
CVE-2025-5462 CVE record

CVSS 7.5 High

Heap-based buffer overflow in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-5456 CVE record

CVSS 7.5 High

Out-of-bounds read in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Memory corruption
Not analysed yet 12 Aug 2025