[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKHzxL92bU1gqzaJEZSteHaPHmZQbPbwM8l3m_uAGpAE":3,"g5a-family:ivanti\u002Fzero_trust_access_gateway":112,"g5a-ex:ivanti\u002Fzero_trust_access_gateway@*":113},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":84,"seoMetadata":90,"meta":109},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"ivanti","zero_trust_access_gateway",4,17,1,"2025-09-09",[14,18,20,22],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"22.5",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"22.6",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"22.7",{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"22.8",16,"Zero Trust Access Gateway by Ivanti is a technology product with 4 tracked versions and 17 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},[32,40,47,53,57,62,64,70,75,80],{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":4,"epssScore":39},"CVE-2025-22457","A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.","2025-04-03",9,"v3.1","Critical",0.99981,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":46},"CVE-2024-22024","An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.","2024-02-13",8.3,"High",0.94721,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":52},"CVE-2025-5462","A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.","2025-08-12",7.5,0.01138,{"cveId":54,"description":55,"publishedDate":50,"cvssScore":51,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":56},"CVE-2025-5456","A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service. CWE-125",0.0112,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":61},"CVE-2025-55142","Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings.",8.8,0.00964,{"cveId":63,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":37,"severity":45,"isKev":17,"epssScore":61},"CVE-2025-55141",{"cveId":65,"description":66,"publishedDate":12,"cvssScore":67,"cvssVersion":37,"severity":68,"isKev":17,"epssScore":69},"CVE-2025-55139","SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to enumerate internal services.",6.8,"Medium",0.00907,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":73,"cvssVersion":37,"severity":68,"isKev":17,"epssScore":74},"CVE-2025-55146","An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service.",4.9,0.00798,{"cveId":76,"description":77,"publishedDate":12,"cvssScore":78,"cvssVersion":37,"severity":68,"isKev":17,"epssScore":79},"CVE-2025-55143","Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required.",6.1,0.00745,{"cveId":81,"description":82,"publishedDate":50,"cvssScore":73,"cvssVersion":37,"severity":68,"isKev":17,"epssScore":83},"CVE-2025-5466","XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service",0.00675,[85],{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"severity":38,"isKev":4,"epssScore":39,"cisaVulnName":86,"cisaDateAdded":87,"cisaShortDescription":88,"cisaRequiredAction":89},"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","2025-04-04","Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution. ","Apply mitigations as set forth in the CISA instructions linked below.",{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Zero Trust Access Gateway by Ivanti - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Zero Trust Access Gateway by Ivanti covering 4 versions with 17 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Zero Trust Access Gateway vulnerabilities, Zero Trust Access Gateway security, Zero Trust Access Gateway CVE, Ivanti Zero Trust Access Gateway, Zero Trust Access Gateway threat intelligence, Ivanti security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Zero Trust Access Gateway KEV, Zero Trust Access Gateway exploited vulnerabilities",{"@context":95,"@type":96,"name":97,"description":92,"url":98,"manufacturer":99,"applicationCategory":103,"softwareVersion":104,"mainEntity":105},"https:\u002F\u002Fschema.org","SoftwareApplication","Zero Trust Access Gateway","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fivanti\u002Fzero_trust_access_gateway",{"@type":100,"name":101,"url":102},"Organization","Ivanti","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fivanti","Security Software","4 versions tracked",{"@type":106,"name":107,"description":108,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Zero Trust Access Gateway Security Vulnerabilities","Security vulnerabilities affecting Zero Trust Access Gateway by Ivanti",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":110,"apiVersion":111},"2026-10-28T20:59:15.763Z","3.0",[],{"rows":114,"total":11,"capped":17,"failed":16},[115],{"cveId":33,"name":86,"severity":38,"cvss":36,"added":87,"epss":39,"published":116,"ranges":117,"checked":4,"hits":120,"covers":17},"2025-04-03T16:15:35.37",[118,23,119],"before 22.8","22.8-r2.1",[]]