AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2025-22457.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSCISA known exploitedAdded Apr 04, 2025
RECORD STATUSAwaiting NVD dataModified Apr 04, 2025

Disclosure summary

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

CISA remediation guidance

Apply mitigations as set forth in the CISA instructions linked below.

Original records & references

PUBLISHED 2025-04-04T00:00:00-04:00
MODIFIED 2025-04-04T00:00:00-04:00
INGESTED 2026-10-06T11:42:57-04:00