An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NIvanti Neurons For Itsm
APPIvanti< 2023.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2025-22462CRITICAL9.8PL ✓ten sam produkt
Authentication Bypass w Ivanti Neurons for ITSM — dostęp administracyjny bez uwierzytelnienia
CVE-2024-7569CRITICAL9.6PL ✓ten sam produkt
Ujawnienie OIDC client secret w Ivanti Neurons for ITSM przez debug info
CVE-2023-46808CRITICAL9.9PL ✓ten sam produkt
Ivanti Neurons for ITSM — podatność file upload umożliwiająca zapis plików na serwerze
CVE-2024-7570HIGH8.3ten sam produkt
Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows...
CVE-2024-22059HIGH8.8ten sam produkt
A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user t...