Neurons For Itsm (Ivanti) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-09-08. Vendor: Ivanti.
CVEs of Neurons For Itsm
- CVE-2026-12647 - CVSS 9.9 (critical), 2026-09-08: A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
- CVE-2026-12646 - CVSS 9.9 (critical), 2026-09-08: A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
- CVE-2026-12645 - CVSS 9.9 (critical), 2026-09-08: A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
- CVE-2026-12648 - CVSS 8.8 (high), 2026-09-08: A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on…
- CVE-2026-12650 - CVSS 9.9 (critical), 2026-09-08: A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on…
- CVE-2026-12651 - CVSS 8.8 (high), 2026-09-08: A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on…
- CVE-2026-12745 - CVSS 9.8 (critical), 2026-09-08: A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code…
- CVE-2026-12744 - CVSS 9.8 (critical), 2026-09-08: A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code…
- CVE-2025-22462 - CVSS 9.8 (critical), 2025-05-13: An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote…
- CVE-2024-7569 - CVSS 9.8 (critical), 2024-08-13: An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain…
- CVE-2024-7570 - CVSS 8.3 (high), 2024-08-13: Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a…
- CVE-2024-22060 - CVSS 8.7 (high), 2024-05-31: An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary…
- CVE-2024-22059 - CVSS 8.8 (high), 2024-05-31: A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the…
- CVE-2023-46808 - CVSS 9.9 (critical), 2024-03-31: An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation…
