Ivanti Neurons for ITSM (Cloud) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ivanti Neurons for ITSM (Cloud): 3 record(s), with affected versions and fixes.

CVE-2026-9614 High · 8.8 CWE-284 Jun 1, 2026

Improper Access Control in Ivanti Neurons for ITSM (On-Premises)

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

CVE-2026-4914 Medium · 5.4 CWE-79 Apr 14, 2026

Cross-site Scripting (XSS) in Ivanti Neurons for ITSM (On-Premise)

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

CVE-2026-4913 Medium · 5.7 CWE-424 Apr 14, 2026

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a…

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.