CVE-2025-55145

Description

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections.

Overview

State: PUBLISHED
Assigner (CNA): ivanti
CVSS severity: HIGH
CVSS score: 8.9 / 10
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Effective score: 8.9 / 10 HIGH source: CNA overview
CWE(s): CWE-862
Reserved: 2025-08-07
Published: 2025-09-09 17:22 UTC
Last updated: 2026-02-26 18:49 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55145.json
Linked Threat: CVE-2025-55145 — CVE-2025-55145

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2025-27418
Assigner: ivanti
Published: Sep 9, 2025, 3:22:05 PM
Updated: Feb 26, 2026, 5:49:03 PM
EUVD base score (CVSS 3.1): 8.9 / 10
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
EUVD-reported EPSS: 0.5700
Vendors: Ivanti
Products: Connect Secure 22.7R2.9 (patch: 22.7R2.9)

ZTA Gateway (patch: 2.8R2.3-723)

Neurons for Secure Access (patch: 22.8R1.4 (Fix deployed on 02-Aug-2025))

Policy Secure (patch: 22.7R1.6)

Connect Secure 22.7R2.9 (patch: 22.8R2)
Aliases: GHSA-qch7-73vq-h8qh

ENISA description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections.

EUVD references (1)

https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US

Affected products (4)

Vendor	Product	Versions	Platforms
Ivanti	Connect Secure 22.7R2.9	`22.7R2.9` (unaffected), `22.8R2` (unaffected)	—
Ivanti	Policy Secure	`22.7R1.6` (unaffected)	—
Ivanti	ZTA Gateway	`2.8R2.3-723` (unaffected)	—
Ivanti	Neurons for Secure Access	`22.8R1.4 (Fix deployed on 02-Aug-2025)` (unaffected)	—

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Microsoft and Adobe Patch Tuesday, September 2025 Security Update ...

web:blog.qualys.com

EVALUATE Vendor-Suggested Mitigation with Policy Audit With Qualys Policy Audit's Out-of-the-Box Mitigation or Compensatory Controls, reduce the risk of a vulnerability being exploited because the remediation ( fix / patch ) cannot be done now; these security controls are not recommended by any industry standards, such as CIS, DISA-STIG.

2026-05-22 14:35 UTC
Microsoft December 2025 Patch Tuesday - 56 Vulnerabilities Fixed ...

web:cybersecuritynews.com

Microsoft released its final Patch Tuesday updates of 2025 on December 9, addressing 56 security vulnerabilities across Windows, Office, Exchange Server, and other components.

2026-05-22 14:35 UTC
CVE-2025-55145 - Exploits & Severity - Feedly

web:feedly.com

CVE Id: CVE-2025-55145 Release Date: 2025 -09-11 Update Date: 2025 -09-11 Description Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 ( Fix deployed on 02-Aug- 2025 ) allows a remote authenticated attacker to hijack existing HTML5 connections ...

2026-05-22 14:35 UTC
Microsoft Patch Tuesday, September 2025 Edition - Krebs on Security

web:krebsonsecurity.com

Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities ...

2026-05-22 14:35 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-22 14:35 UTC
November 2025 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft has released security updates for 63 vulnerabilities, including 1 zero-day and 4 critical vulnerabilities, in its November 2025 Patch Tuesday rollout.

2026-05-22 14:35 UTC
Microsoft Confirms Emergency Update For Millions Of Windows Users - Forbes

web:www.forbes.com

"Microsoft says it's rolling out an emergency patch that should address localhost-related issues in Windows 11 24H2/25H2, but remember, the hotfix could take longer than 48 hours to show on ...

2026-05-22 14:35 UTC
Microsoft Patch Tuesday - November 2025 - Lansweeper

web:www.lansweeper.com

Which vulnerabilities, issues, and other things did Microsoft update? Discover what's new using Lansweeper's Patch Tuesday November 2025 summary.

2026-05-22 14:35 UTC
Oracle Critical Patch Update Advisory - October 2025

web:www.oracle.com

This Critical Patch Update contains 374 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at October 2025 Critical Patch Update: Executive Summary and Analysis.

2026-05-22 14:35 UTC
Microsoft just gave you another reason to update your PC — November's ...

web:www.tomsguide.com

November's Patch Tuesday updates fix 63 flaws in total but two of them are critical vulnerabilities that require your immediate attention.

2026-05-22 14:35 UTC

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

http://cwe.mitre.org/data/definitions/862.html rapid7:cwe.mitre.org
https://attackerkb.com/topics/CVE-2025-55145 rapid7:attackerkb.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27418 rapid7:euvd.enisa.europa.eu
https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US rapid7:forums.ivanti.com
https://www.cve.org/CVERecord?id=CVE-2025-55145 rapid7:www.cve.org

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-55145.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-55145",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-10T03:56:11.515658Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:49:03.893Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Connect Secure 22.7R2.9",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "22.7R2.9"
            },
            {
              "status": "unaffected",
              "version": "22.8R2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Policy Secure",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "22.7R1.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "ZTA Gateway",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2.8R2.3-723"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Neurons for Secure Access",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "22.8R1.4 (Fix deployed on 02-Aug-2025)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "<span style=\"background-color: rgb(242, 242, 242);\">Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723  and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections.</span><br>"
            }
          ],
          "value": "Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723  and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-40",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-40: Manipulation of Control Flow via Request"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-09T15:22:05.340Z",
        "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "shortName": "ivanti"
      },
      "references": [
        {
          "url": "https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
    "assignerShortName": "ivanti",
    "cveId": "CVE-2025-55145",
    "datePublished": "2025-09-09T15:22:05.340Z",
    "dateReserved": "2025-08-07T16:15:48.897Z",
    "dateUpdated": "2026-02-26T17:49:03.893Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}