CVE-2025-22457

Vulnerability updated 5 months ago (2025-04-03T17:56:15.203Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2025-22457 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 3)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Ivanti

Vulnerability

Exploit

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Threat Actors

To see the evidence that has resulted in these threatActor associations, create a free account

Alias Description	Association Type	Votes
The Unc5221 Threat Actor is associated with CVE-2025-22457. UNC5221, a threat actor linked to China, has been identified as the group behind recent cyberattacks involving new malware specifically designed to exploit vulnerabilities in Ivanti Connect Secure VPN and Policy Secure devices. The discovery was made by Mandiant researchers who observed the deployme	Unspecified	2

Source Document References

Information about the CVE-2025-22457 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
Recorded Future	18 days ago	H1 2025 Malware and Vulnerability Trends
Securelist	19 days ago	Vulnerability landscape analysis for Q2 2025
Securityaffairs	5 months ago	U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog
Checkpoint	5 months ago	7th April – Threat Intelligence Report - Check Point Research
CISA	5 months ago	Ivanti Releases Security Updates for Connect Secure, Policy Secure & ZTA Gateways Vulnerability (CVE-2025-22457) \| CISA
CISA	5 months ago	CISA Adds One Vulnerability to the KEV Catalog \| CISA
Canadian Centre for Cyber Security	5 months ago	Vulnerability impacting Ivanti Connect Secure, Policy Secure and ZTA Gateways - Canadian Centre for Cyber Security
InfoSecurity-magazine	5 months ago	Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw
Securityaffairs	5 months ago	China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March
Canadian Centre for Cyber Security	5 months ago	Ivanti security advisory (AV25-184) - Canadian Centre for Cyber Security