Ivanti Neurons For Zero-trust Access — known CVE vulnerabilities

Every CVE whose affected-product data names Ivanti Neurons For Zero-trust Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-0282 — CVSS 9.0 (critical) — actively exploited: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti…
• CVE-2024-21893 — CVSS 8.2 (high) — actively exploited: A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)…
• CVE-2022-35254 — CVSS 7.5 (high): An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to…
• CVE-2022-35258 — CVSS 7.5 (high): An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to…
• CVE-2025-0283 — CVSS 7.0 (high): A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti…