Skip to content
fr Sign in
5.7 Medium

CVE-2026-4913 Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker…

Description

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.

Affected products and versions

Product Affected versions Fixed in
Neurons for ITSM (On-Premise) 2025.4 earliest → < 2025.4 2025.4
Neurons for ITSM (Cloud) 2025.4 earliest → < 2025.4 2025.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Neurons for ITSM (On-Premise)

The 2 CVEs of Neurons for ITSM (On-Premise) →
CVE-2026-4914 Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information… 5.4 Medium
Track this CVE