Advisories · Technology
Ivanti Neurons for ITSM (Cloud).
Every CVE that names Ivanti Neurons for ITSM (Cloud) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Improper access control in Ivanti Neurons for ITSM (On-Premises) and others
- Ivanti Neurons for ITSM (On-Premises)
- Ivanti Neurons for ITSM (Cloud)
- Broken access control
- CVSS 5.4 Medium
Cross-site scripting in Ivanti Neurons for ITSM (On-Premise) and others
- Ivanti Neurons for ITSM (On-Premise)
- Ivanti Neurons for ITSM (Cloud)
- Cross-site scripting (XSS)
- CVSS 5.7 Medium
Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.
- Ivanti Neurons for ITSM (On-Premise)
- Ivanti Neurons for ITSM (Cloud)
- CWE-424