CVE-2025-5462

Published: Aug 12, 2025

Modified: Aug 12, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.

Vendor	Product	Versions
Ivanti	Connect Secure	unaffected `22.7R2.8` unaffected `22.8R2`
Ivanti	Policy Secure	unaffected `22.7R1.5`
Ivanti	ZTA Gateway	unaffected `22.8R2.3-723`
Ivanti	Neurons for Secure Access	unaffected `22.8R1.4 (Fix deployed on 02-Aug-2025)`

Weaknesses (CWE)

CWE-122

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-Multiple-CVEs?language=en_US

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-5462

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References