Security Alert (A25-08-09): Multiple Vulnerabilities in Ivanti Products

Description:

Ivanti has released security advisory to address multiple vulnerabilities in Ivanti products. Detailed information about the vulnerabilities can be found at:
https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-Multiple-CVEs

Affected Systems:

• Ivanti Connect Secure (ICS) versions prior to 22.7R2.7
• Ivanti Policy Secure (IPS) versions prior to 22.7R1.4
• Ivanti ZTA Gateway version 22.8R2.2
• Ivanti Neurons for Secure Access versions prior to 22.8R1.3

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to denial of service or information disclosure on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-Multiple-CVEs
• https://www.hkcert.org/security-bulletin/ivanti-products-multiple-vulnerabilities_20250813
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5456
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5462
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5466
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5468