Zero Trust Access Gateway vulnerabilities | LiveThreat CVE Feed

Product

Zero Trust Access Gateway

by Ivanti · last CVE Sep 9, 2025

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 8Medium 8Low 0

Severity

All severities17 Critical1 High8 Medium8 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Zero Trust Access Gateway to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-55145	8.9	1%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for… Affected: 22.8
CVE-2025-55142	8.8	1%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure… Affected: 22.8
CVE-2025-55141	8.8	1%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure… Affected: 22.8
CVE-2025-55147	8.8	1%	Sep 9	CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before… Affected: 22.8
CVE-2024-22024	8.3	95%	Feb 13	An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker… Affected: 22.6
CVE-2025-55148	7.6	1%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure… Affected: 22.8
CVE-2025-5462	7.5	1%	Aug 12	A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons… Affected: 22.8
CVE-2025-5456	7.5	1%	Aug 12	A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons… Affected: 22.8