Neurons for Secure Access vulnerabilities

7 known vulnerabilities in Neurons for Secure Access from Ivanti. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55148Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Cross-Site Request Forgery

  CVE-2025-55147Sep 9, 2025Ivanti

  CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to

• 8.9 High severity

  Connect Secure 22.7R2.9: Missing Authorization

  CVE-2025-55145Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55142Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55141Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 7.5 High severity

  Connect Secure: Heap-based Buffer Overflow

  CVE-2025-5462Aug 12, 2025IvantiEPSS 1.2%

  A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote una

• 7.5 High severity

  Connect Secure: Out-of-bounds Read

  CVE-2025-5456Aug 12, 2025IvantiEPSS 1.18%

  A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote