Known vulnerabilities in Ivanti Neurons for ITSM

Vendor: Ivanti
Software: Ivanti Neurons for ITSM
Software CPE: cpe:2.3:a:ivanti:ivanti_neurons_for_itsm:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ivanti Neurons for ITSM Ivanti Neurons for ITSM is affected by 17 known vulnerabilities: 1 critical, 3 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147419 - Deserialization of Untrusted Data
CVE-2026-12745		 CWE-502 High
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147420 - Deserialization of Untrusted Data
CVE-2026-12651		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147421 - Deserialization of Untrusted Data
CVE-2026-12650		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147422 - Deserialization of Untrusted Data
CVE-2026-12648		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147423 - Missing Authorization
CVE-2026-12645		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147424 - Missing Authorization
CVE-2026-12646		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147425 - Missing Authorization
CVE-2026-12647		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147418 - Deserialization of Untrusted Data
CVE-2026-12744		 CWE-502 High
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU133140 - Improper Access Control
CVE-2026-9614		 CWE-284 Medium
No
No
 2025.2 Patch 1, 2025.3 Patch 1, 2025.4 Patch 1 01.06.2026 SB2026060169
#VU126052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4914		 CWE-79 Low
No
No
 2025.4 14.04.2026 SB20260414154
#VU126051 - Improper Protection of Alternate Path
CVE-2026-4913		 CWE-424 Low
No
No
 2025.4 14.04.2026 SB20260414154
#VU109036 - Improper Authentication
CVE-2025-22462		 CWE-287 Critical
No
No
 2023.4 May 2025 Security Patch, 2024.2 May 2025 Security Patch, 2024.3 May 2025 Security Patch 13.05.2025 SB2025051356
#VU95986 - Improper Certificate Validation
CVE-2024-7570		 CWE-295 High
No
No
 - 14.08.2024 SB2024081423
#VU95985 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7569		 CWE-200 Medium
No
No
 - 14.08.2024 SB2024081423
#VU89720 - Unrestricted Upload of File with Dangerous Type
CVE-2024-22060		 CWE-434 Medium
No
No
 - 22.05.2024 SB2024052215
#VU89719 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-22059		 CWE-89 Medium
No
No
 - 22.05.2024 SB2024052215
#VU87674 - Unrestricted Upload of File with Dangerous Type
CVE-2023-46808		 CWE-434 Medium
No
No
 - 20.03.2024 SB2024032064