Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-55147

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Connect Secure

Default version status: affected

  • 22.7R2.9unaffected
  • 22.8R2unaffected

Ivanti Policy Secure

Default version status: affected

  • 22.7R1.6unaffected

Ivanti ZTA Gateway

Default version status: affected

  • 2.8R2.3-723unaffected

Ivanti Neurons for Secure Access

Default version status: affected

  • 22.8R1.4 (Fix deployed on 02-Aug-2025)unaffected

References