CSRF Vulnerability in Ivanti Connect Secure and Related Products

CVE-2025-55147

What is CVE-2025-55147?

A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple Ivanti products, allowing an unauthenticated remote attacker to execute sensitive actions on behalf of the victim user. User interaction is necessary for the exploitation of this flaw, as it requires the victim to perform specific actions. This issue affects various versions of Ivanti Connect Secure, Policy Secure, ZTA Gateway, and Neurons for Secure Access, underlining the need for prompt remediation to mitigate potential security risks.

References