Orta CVSS 6.1
CVE-2025-55143: Connect Secure: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required.
Özet bilgiler
- Ürün
- Ivanti Connect Secure
- CVSS v3.1
- 6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- %0,75 (yüzdelik 55)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ivanti-connect-secure | — | — | 22.7 |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | — | — | 22.7 |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-zero-trust-access-gateway | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | — | — | 22.8 |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |