SSRF Vulnerability in Ivanti Connect Secure and Ivanti Policy Secure
CVE-2025-0292
5.5MEDIUM
What is CVE-2025-0292?
A Server-Side Request Forgery (SSRF) vulnerability exists in Ivanti Connect Secure and Ivanti Policy Secure prior to specified versions. This flaw allows a remote attacker who has administrative privileges to manipulate the application into sending unauthorized requests to internal network services. If exploited, this vulnerability could lead to unauthorized access to sensitive internal resources, posing a significant risk to organizational security.
Affected Version(s)
Connect Secure 22.7R2.8
Policy Secure 22.7R1.5