CVE-2025-22457

No fix known ExploitedEPSS 100%CVSS 9.0

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Published 2025-04-03 · In CISA KEV since 2025-04-04 · CVE record · OSV

Products: ivanti connect_secure, ivanti policy_secure, Ivanti Neurons for ZTA gateways