Ivanti Neurons for Secure

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-8711fixed in 22.8R1.4 (Fix deployed on 02-Aug-2025)CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and IvaMEDIUM 5.40.3 %
CVE-2025-5456fixed in 22.8R1.4 (Fix deployed on 02-Aug-2025)A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA GatewaHIGH 7.51.1 %