Medium WID-SEC-2026-1120 2 CVEs

Ivanti Neurons for ITSM: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Apr 14, 2026 · Updated Apr 14, 2026 · de-DE

Vendor: ivanti Product: Neurons for ITSM

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ivanti Neurons for ITSM ausnutzen, um Informationen offenzulegen.

Product

Ivanti Neurons for ITSM ist eine cloudbasierte IT-Service-Management-Plattform

Vulnerabilities 2

Medium 5.7

CVE-2026-4913

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker …

ivanti Neurons for ITSM (Cloud) Neurons for ITSM (On-Premise) Network devices

Apr 14, 2026
Medium 5.4

CVE-2026-4914

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information …

ivanti Neurons for ITSM (Cloud) Neurons for ITSM (On-Premise) Network devices

Apr 14, 2026

Revision history

2026-04-14 #1
Initiale Fassung

References

Security Advisory Ivanti Neurons for ITSM (CVE-2026-4913, CVE-2026-4914) vom 2026-04-14
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4914