CVE-2025-22460: High severity Ivanti Cloud Services Application vulnerability
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Cloud Services Applicationto a version that resolves this vulnerability.Fixed in 5.0.5
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-22460?
CVE-2025-22460 has been rated as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2025-22460?
To fix CVE-2025-22460, upgrade the Ivanti Cloud Services Application to version 5.0.5 or later.
Who is affected by CVE-2025-22460?
All users of Ivanti Cloud Services Application versions prior to 5.0.5 are affected by CVE-2025-22460.
What type of attack does CVE-2025-22460 allow?
CVE-2025-22460 allows a local authenticated attacker to escalate their privileges within the affected application.
When was CVE-2025-22460 announced?
CVE-2025-22460 was announced as a security advisory affecting Ivanti Cloud Services Application.