Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

Published

2025-03-11T15:15:44.737

Last Modified

2025-07-16T15:25:26.530

Status

Analyzed

Source

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-732

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ivanti	secure_access_client	< 22.7	Yes
Application	ivanti	secure_access_client	22.7	Yes
Application	ivanti	secure_access_client	22.7	Yes
Application	ivanti	secure_access_client	22.7	Yes
Application	ivanti	secure_access_client	22.7	Yes
Application	ivanti	secure_access_client	22.7	Yes

References

https://forums.ivanti.com/s/article/March-Security-Advisory-Ivanti-Secure-Access-Client-ISAC-CVE-2025-22454 Vendor Advisory (3c1d8aa1-5a33-4ea4-8992-aadd6440af75)