[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYGufPRCFpvCRVtNNGdK8I_EQopZXZPYJny2HROKPWwk":3,"g5a-family:ivanti\u002Fneurons_for_zero-trust_access":107,"g5a-ex:ivanti\u002Fneurons_for_zero-trust_access@*":108},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":72,"seoMetadata":85,"meta":104},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"ivanti","neurons_for_zero-trust_access",7,6,3,"2025-04-03",[14,18,20,22,24,26,28],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"22.2",5,2,{"version":19,"cve_count":11,"kev_count":17,"has_kev":4},"22.3",{"version":21,"cve_count":11,"kev_count":17,"has_kev":4},"22.4",{"version":23,"cve_count":11,"kev_count":17,"has_kev":4},"22.5",{"version":25,"cve_count":11,"kev_count":17,"has_kev":4},"22.6",{"version":27,"cve_count":11,"kev_count":17,"has_kev":4},"22.7",{"version":29,"cve_count":30,"kev_count":30,"has_kev":4},"22.8",1,"Neurons For Zero-trust Access by Ivanti is a technology product with 7 tracked versions and 6 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":11,"kev_count":17,"has_kev":4},{"version":21,"cve_count":11,"kev_count":17,"has_kev":4},{"version":23,"cve_count":11,"kev_count":17,"has_kev":4},{"version":25,"cve_count":11,"kev_count":17,"has_kev":4},{"version":27,"cve_count":11,"kev_count":17,"has_kev":4},{"version":29,"cve_count":30,"kev_count":30,"has_kev":4},[41,49,56,59,64,70],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48},"CVE-2024-21893","A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.","2024-01-31",8.2,"v3.1","High",0.99999,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":4,"epssScore":55},"CVE-2025-0282","A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.","2025-01-08",9,"Critical",0.99981,{"cveId":57,"description":58,"publishedDate":12,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":4,"epssScore":55},"CVE-2025-22457","A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.",{"cveId":60,"description":61,"publishedDate":52,"cvssScore":9,"cvssVersion":46,"severity":47,"isKev":62,"epssScore":63},"CVE-2025-0283","A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.",false,0.17456,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":46,"severity":47,"isKev":62,"epssScore":69},"CVE-2022-35254","An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.","2022-12-05",7.5,0.02681,{"cveId":71,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":46,"severity":47,"isKev":62,"epssScore":69},"CVE-2022-35258",[73,78,81],{"cveId":57,"description":58,"publishedDate":12,"cvssScore":53,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":74,"cisaDateAdded":75,"cisaShortDescription":76,"cisaRequiredAction":77},"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","2025-04-04","Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution. ","Apply mitigations as set forth in the CISA instructions linked below.",{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":74,"cisaDateAdded":52,"cisaShortDescription":79,"cisaRequiredAction":80},"Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.","Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.",{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":82,"cisaDateAdded":44,"cisaShortDescription":83,"cisaRequiredAction":84},"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Neurons For Zero-trust Access by Ivanti - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Neurons For Zero-trust Access by Ivanti covering 7 versions with 6 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Neurons For Zero-trust Access vulnerabilities, Neurons For Zero-trust Access security, Neurons For Zero-trust Access CVE, Ivanti Neurons For Zero-trust Access, Neurons For Zero-trust Access threat intelligence, Ivanti security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Neurons For Zero-trust Access KEV, Neurons For Zero-trust Access exploited vulnerabilities",{"@context":90,"@type":91,"name":92,"description":87,"url":93,"manufacturer":94,"applicationCategory":98,"softwareVersion":99,"mainEntity":100},"https:\u002F\u002Fschema.org","SoftwareApplication","Neurons For Zero-trust Access","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fivanti\u002Fneurons_for_zero-trust_access",{"@type":95,"name":96,"url":97},"Organization","Ivanti","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fivanti","Security Software","7 versions tracked",{"@type":101,"name":102,"description":103,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Neurons For Zero-trust Access Security Vulnerabilities","Security vulnerabilities affecting Neurons For Zero-trust Access by Ivanti",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":105,"apiVersion":106},"2026-10-28T23:04:51.504Z","3.0",[],{"rows":109,"total":11,"capped":62,"failed":136},[110,114,121],{"cveId":57,"name":74,"severity":54,"cvss":53,"added":75,"epss":55,"published":111,"ranges":112,"checked":4,"hits":113,"covers":62},"2025-04-03T16:15:35.37",[],[],{"cveId":50,"name":74,"severity":54,"cvss":53,"added":52,"epss":55,"published":115,"ranges":116,"checked":4,"hits":120,"covers":62},"2025-01-08T23:15:09.763",[117,118,119],"22.7-r2","22.7-r2.2","22.7-r2.3",[],{"cveId":42,"name":82,"severity":47,"cvss":45,"added":44,"epss":48,"published":122,"ranges":123,"checked":4,"hits":135,"covers":62},"2024-01-31T18:15:47.437",[124,125,126,127,128,129,130,131,132,133,134],"22.2-r1","22.2-r4","22.2-r5","22.3-r1","22.3-r4","22.4-r1","22.4-r3","22.5-r1","22.5-r1.2","22.6-r1","22.6-r1.2",[],0]