Known vulnerabilities in Ivanti Neurons for ITSM

Vendor: Ivanti
Software: Ivanti Neurons for ITSM
Software CPE: cpe:2.3:a:ivanti:ivanti_neurons_for_itsm:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ivanti Neurons for ITSM Ivanti Neurons for ITSM is affected by 9 known vulnerabilities: 1 critical, 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133140 - Improper Access Control
CVE-2026-9614		 CWE-284 Medium
No
No
 2025.2 Patch 1, 2025.3 Patch 1, 2025.4 Patch 1 01.06.2026 SB2026060169
#VU126052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4914		 CWE-79 Low
No
No
 2025.4 14.04.2026 SB20260414154
#VU126051 - Improper Protection of Alternate Path
CVE-2026-4913		 CWE-424 Low
No
No
 2025.4 14.04.2026 SB20260414154
#VU109036 - Improper Authentication
CVE-2025-22462		 CWE-287 Critical
No
No
 2023.4 May 2025 Security Patch, 2024.2 May 2025 Security Patch, 2024.3 May 2025 Security Patch 13.05.2025 SB2025051356
#VU95986 - Improper Certificate Validation
CVE-2024-7570		 CWE-295 High
No
No
 - 14.08.2024 SB2024081423
#VU95985 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7569		 CWE-200 Medium
No
No
 - 14.08.2024 SB2024081423
#VU89720 - Unrestricted Upload of File with Dangerous Type
CVE-2024-22060		 CWE-434 Medium
No
No
 - 22.05.2024 SB2024052215
#VU89719 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-22059		 CWE-89 Medium
No
No
 - 22.05.2024 SB2024052215
#VU87674 - Unrestricted Upload of File with Dangerous Type
CVE-2023-46808		 CWE-434 Medium
No
No
 - 20.03.2024 SB2024032064