This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Ivanti fixes 13 vulnerabilities in various products
Ivanti fixes 13 vulnerabilities in Ivanti Connect Secure, Policy Secure, ZTA Gateways, Neurons for Secure Access and Ivanti Endpoint Manager. The most severe vulnerabilities are described below; the remaining ones can be found at [1][2]. Products and their fixed versions: Ivanti Connect Secure - 22.7R2.9, 22.8R2 [1] Ivanti Policy Secure - 22.7R1.5 [1] ZTA Gateways - 22.8R2.3-723 [1] Neurons for Secure Access - 22.8R1.4 [1] Ivanti Endpoint Manager - 2022 SU8 Security Release 2, 2024 SU3 Security Release 1 [2]
Due to missing authorization in Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway and Ivanti Neurons for Secure Access, an authenticated remote attacker can hijack an existing HTML5 connection [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.8
- Ivanti Policy Secure; <=22.7R1.4
- ZTA Gateways; =22.8R2.2
- Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
More information:
- CVE-2025-55145 at cve.org, NVD
- CWE-862: Missing Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 9. 9. 2025.
In Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway and Ivanti Neurons for Secure Access, an unauthenticated remote attacker can carry out a CSRF attack [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.8
- Ivanti Policy Secure; <=22.7R1.4
- ZTA Gateways; =22.8R2.2
- Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2025-55147 at cve.org, NVD
- CWE-352: Cross-Site Request Forgery (CSRF) at cwe.mitre.org
The vulnerability was publicly disclosed 9. 9. 2025.
Due to missing authorization in Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway and Ivanti Neurons for Secure Access, an authenticated remote attacker with read-only administrator privileges can configure authentication-related settings [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.8
- Ivanti Policy Secure; <=22.7R1.4
- ZTA Gateways; =22.8R2.2
- Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2025-55141 at cve.org, NVD
- CVE-2025-55142 at cve.org, NVD
- CWE-862: Missing Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 9. 9. 2025.
Due to insufficient validation of file names in Ivanti Endpoint Manager, an unauthenticated remote attacker can achieve remote code execution [2].
The vulnerability is present in product:
- Ivanti Endpoint Manager; <=2022 SU8 Security Update 1; <=2024 SU3
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2025-9712 at cve.org, NVD
- CVE-2025-9872 at cve.org, NVD
- CWE-434: Unrestricted Upload of File with Dangerous Type at cwe.mitre.org
The vulnerability was publicly disclosed 9. 9. 2025.
Due to missing authorization in Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway and Ivanti Neurons for Secure Access, an authenticated remote attacker with read-only administrator privileges can configure restricted settings without authorization [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.8
- Ivanti Policy Secure; <=22.7R1.4
- ZTA Gateways; =22.8R2.2
- Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
More information:
- CVE-2025-55148 at cve.org, NVD
- CWE-862: Missing Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 9. 9. 2025.
Links
By CESNET, z.s.p.o. Michaela Jarošová on 11. 9. 2025.