HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-22059

CVSS 8.8v3.0pub. 2024-05-31upd. 2025-06-30

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Ivanti Neurons For Itsm

    APP
    Ivanti
    < 2023.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2025-22462CRITICAL9.8PL ✓ten sam produkt

Authentication Bypass w Ivanti Neurons for ITSM — dostęp administracyjny bez uwierzytelnienia

CVE-2024-7569CRITICAL9.6PL ✓ten sam produkt

Ujawnienie OIDC client secret w Ivanti Neurons for ITSM przez debug info

CVE-2023-46808CRITICAL9.9PL ✓ten sam produkt

Ivanti Neurons for ITSM — podatność file upload umożliwiająca zapis plików na serwerze

CVE-2024-7570HIGH8.3ten sam produkt

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows...

CVE-2024-22060MEDIUM4.9ten sam produkt

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authent...