CVE-2025-22457CRITICAL 9.8CISA KEVEPSS p100.0%

CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti / Connect Secure, Policy Secure, and ZTA Gateways

Description

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS99.96% probability of exploitation · percentile 100.0% · 2026-06-15T12:03:41Z
Published2025-04-03
Last modified2025-10-24

CISA KEV entry

Added to KEV: 2025-04-04

Underlying weaknesses· 2

CWE-121CWE-787

References

  1. https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
  2. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22457

2

TypeTargetConfidenceTier
WeaknessStack-based Buffer Overflowcwe-1210%live
WeaknessOut-of-bounds Writecwe-7870%live

(incoming)1

TypeTargetConfidenceTier
KEVEntryIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerabilitykev-cve-2025-224570%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-22467
CVE
CVE-2025-55147
CVE
CVE-2025-55141
CVE
CVE-2025-55142
CVE
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
CVE
CVE-2025-55145
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.