Skip to content
OpenAdvisories
High · 8.8 CVE-2024-22059 EUVD-2024-19657GHSA-jwg9-47h4-mj73

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete informat…

Published May 31, 2024 · Updated Aug 1, 2024 · Assigned by hackerone

Description

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.

Affected products

VendorProductAffectedFixed
Ivanti ITSM 2023.3 – ≤ 2023.3 —

References