CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-0283

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.9%

CVSS Severity

CVSS v3 Score 7.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283

Products affected by CVE-2025-0283

Ivanti » Connect Secure » Version: N/A

cpe:2.3:a:ivanti:connect_secure:-
Ivanti » Connect Secure » Version: 21.12

cpe:2.3:a:ivanti:connect_secure:21.12
Ivanti » Connect Secure » Version: 21.9

cpe:2.3:a:ivanti:connect_secure:21.9
Ivanti » Connect Secure » Version: 22.1

cpe:2.3:a:ivanti:connect_secure:22.1
Ivanti » Connect Secure » Version: 22.2

cpe:2.3:a:ivanti:connect_secure:22.2
Ivanti » Connect Secure » Version: 22.3

cpe:2.3:a:ivanti:connect_secure:22.3
Ivanti » Connect Secure » Version: 22.4

cpe:2.3:a:ivanti:connect_secure:22.4
Ivanti » Connect Secure » Version: 22.5

cpe:2.3:a:ivanti:connect_secure:22.5
Ivanti » Connect Secure » Version: 22.6

cpe:2.3:a:ivanti:connect_secure:22.6
Ivanti » Connect Secure » Version: 22.7

cpe:2.3:a:ivanti:connect_secure:22.7
Ivanti » Connect Secure » Version: 7.1

cpe:2.3:a:ivanti:connect_secure:7.1
Ivanti » Connect Secure » Version: 7.4

cpe:2.3:a:ivanti:connect_secure:7.4
Ivanti » Connect Secure » Version: 8.0

cpe:2.3:a:ivanti:connect_secure:8.0
Ivanti » Connect Secure » Version: 8.1

cpe:2.3:a:ivanti:connect_secure:8.1
Ivanti » Connect Secure » Version: 8.2

cpe:2.3:a:ivanti:connect_secure:8.2
Ivanti » Connect Secure » Version: 8.3

cpe:2.3:a:ivanti:connect_secure:8.3
Ivanti » Connect Secure » Version: 9.0

cpe:2.3:a:ivanti:connect_secure:9.0
Ivanti » Connect Secure » Version: 9.1

cpe:2.3:a:ivanti:connect_secure:9.1
Ivanti » Neurons For Zero-Trust Access » Version: N/A

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:-
Ivanti » Neurons For Zero-Trust Access » Version: 22.2

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2
Ivanti » Neurons For Zero-Trust Access » Version: 22.3

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.3
Ivanti » Neurons For Zero-Trust Access » Version: 22.4

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.4
Ivanti » Neurons For Zero-Trust Access » Version: 22.5

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.5
Ivanti » Neurons For Zero-Trust Access » Version: 22.6

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6
Ivanti » Neurons For Zero-Trust Access » Version: 22.7

cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.7
Ivanti » Policy Secure » Version: N/A

cpe:2.3:a:ivanti:policy_secure:-
Ivanti » Policy Secure » Version: 22.1

cpe:2.3:a:ivanti:policy_secure:22.1
Ivanti » Policy Secure » Version: 22.2

cpe:2.3:a:ivanti:policy_secure:22.2
Ivanti » Policy Secure » Version: 22.3

cpe:2.3:a:ivanti:policy_secure:22.3
Ivanti » Policy Secure » Version: 22.4

cpe:2.3:a:ivanti:policy_secure:22.4
Ivanti » Policy Secure » Version: 22.5

cpe:2.3:a:ivanti:policy_secure:22.5
Ivanti » Policy Secure » Version: 22.6

cpe:2.3:a:ivanti:policy_secure:22.6
Ivanti » Policy Secure » Version: 22.7

cpe:2.3:a:ivanti:policy_secure:22.7
Ivanti » Policy Secure » Version: 9.0

cpe:2.3:a:ivanti:policy_secure:9.0
Ivanti » Policy Secure » Version: 9.1

cpe:2.3:a:ivanti:policy_secure:9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-0283

Products

Pricing

Contact Us