Orta CVSS 5.4
CVE-2025-8711: Connect Secure: siteler arası istek sahteciliği (CSRF)
Açıklama (NVD)
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute limited actions on behalf of the victim user. User interaction is required.
Özet bilgiler
- Ürün
- Ivanti Connect Secure
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - EPSS
- %0,33 (yüzdelik 26)
- CWE
- CWE-352
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ivanti-connect-secure | — | — | 22.7 |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | — | — | 22.7 |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-zero-trust-access-gateway | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | — | — | 22.8 |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |