VDB
CVE-2025-22457
CVE-2025-22457
PUBLISHED
KEV
Connect Secure bietet TLS- und mobile VPN-Lösungen.
EPSS 99.99% · 100.0th percentile
Risk Scores
EPSS Score
99.99%
100.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Ivanti Connect Secure <22.7R2.6 | |
| Ivanti | Ivanti Policy Secure <22.7R1.4 |
Timeline
- Jan 8, 2025 VulnCheck KEV Exploitation
- Jan 9, 2025 VulnCheck KEV Exploitation
- Jan 16, 2025 VulnCheck XDB Entry
- Jan 17, 2025 VulnCheck KEV Exploitation
- Jan 22, 2025 VulnCheck XDB Entry
- Feb 5, 2025 VulnCheck KEV Exploitation
- Feb 12, 2025 VulnCheck KEV Exploitation
- Feb 13, 2025 VulnCheck KEV Exploitation
- Feb 26, 2025 VulnCheck XDB Entry
- Mar 5, 2025 VulnCheck KEV Exploitation
- Mar 11, 2025 VulnCheck KEV Exploitation
- Mar 13, 2025 VulnCheck KEV Exploitation
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0703.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0703 advisory
- https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways advisory
- https://www.rapid7.com/blog/post/2025/04/03/etr-ivanti-connect-secure-cve-2025-22457-exploited-in-the-wild/ exploit
- https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457 advisory
- https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability exploit