A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22457.json"
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "22.7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2\\.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2\\.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2\\.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2\\.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r2\\.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "22.7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.7-r1\\.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "22.8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.8-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.8-r2\\.1"
}
]
}
]