Skip to content
fr Sign in
5.4 Medium

CVE-2026-4914 Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information…

Description

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

Affected products and versions

Product Affected versions Fixed in
Neurons for ITSM (On-Premise) 2025.4 earliest → < 2025.4 2025.4
Neurons for ITSM (Cloud) 2025.4 earliest → < 2025.4 2025.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Neurons for ITSM (On-Premise)

The 2 CVEs of Neurons for ITSM (On-Premise) →
CVE-2026-4913 Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker… 5.7 Medium
Track this CVE