CVE-2025-8310

8.8 highEPSS 0.8%

High (8.8) in ivanti virtual application delivery controller. EPSS 0.8% chance of exploitation in the next 30 days.

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ivanti:virtual_application_delivery_controller

References

https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Virtual-Application-Delivery-Controller-vADC-previously-vTM-CVE-2025-8310?language=en_US

Check your stack JSON