Ivanti Neurons for Secure Access
13 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-55144 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | MEDIUM 5.4 | 0.6 % | ||
| CVE-2025-55143 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before | MEDIUM 6.1 | 0.7 % | ||
| CVE-2025-55142 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55141 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55139 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | MEDIUM 6.8 | 0.9 % | ||
| CVE-2025-55148 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 7.6 | 0.6 % | ||
| CVE-2025-55147 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | HIGH 8.8 | 0.6 % | ||
| CVE-2025-55146 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor | MEDIUM 4.9 | 0.8 % | ||
| CVE-2025-55145 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.9 | 0.7 % | ||
| CVE-2025-8712 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22 | MEDIUM 5.4 | 0.5 % | ||
| CVE-2025-5468 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti | MEDIUM 5.5 | 0.4 % | ||
| CVE-2025-5466 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Iva | MEDIUM 4.9 | 0.7 % | ||
| CVE-2025-5462 | corrigé en 22.8R1.4 (Fix deployed on 02-Aug-2025) | A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway be | HIGH 7.5 | 1.1 % |