CVE-2025-0282

No fix known ExploitedEPSS 100%CVSS 9.0

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Published 2025-01-08 · In CISA KEV since 2025-01-08 · CVE record · OSV

Products: ivanti connect_secure, ivanti policy_secure, Ivanti Neurons for ZTA gateways