NF
Product
Neurons for ITSM
14
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 1Low 0
Watch
Add Neurons for ITSM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46808 | 9.9 | Mar 31 | An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server Affected: before 2023.4 |
| CVE-2026-12745 | 9.8 | Sep 8 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.2 |
| CVE-2026-12744 | 9.8 | Sep 8 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2025-22462 | 9.8 | May 13 | An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to… Affected: before 2023.4; 2023.4; 2024.2; 2024.3 |
| CVE-2024-7569 | 9.8 | Aug 13 | An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret… Affected: 2023.2; 2023.3; 2023.4 |
| CVE-2026-12647 | 8.8 | Sep 8 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2026-12646 | 8.8 | Sep 8 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2026-12645 | 8.8 | Sep 8 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2026-12648 | 8.8 | Sep 8 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2026-12650 | 8.8 | Sep 8 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2026-12651 | 8.8 | Sep 8 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server Affected: 2025.2; 2025.3; 2025.4; 2026.1; 2026.2 |
| CVE-2024-22059 | 8.8 | May 31 | A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database Affected: before 2023.3 |
| CVE-2024-7570 | 8.1 | Aug 13 | Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would… Affected: 2023.2; 2023.3; 2023.4 |
| CVE-2024-22060 | 4.9 | May 31 | An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive… Affected: before 2023.3 |
Showing 14