ivanti Itsm Vulnerabilities

ivanti Itsm vulnerabilities.

13 August 2024

Attackers Can Impersonate Any User in Ivanti ITSM Due to Certificate Validation Flaw
CVE-2024-7570
IvantiItsm8.1HIGH
Unsafe ITSM Data Disclosure through Debug Information
CVE-2024-7569
IvantiItsm9.8CRITICAL

31 May 2024

SQL Injection Vulnerability in Ivanti Neurons for ITSM Could Lead to Data Theft and Downtime
CVE-2024-22059
IvantiItsm8.8HIGH
Unrestricted File Upload Vulnerability in Ivanti Neurons for ITSM Allows Remote Attackers to Write Arbitrary Files
CVE-2024-22060
IvantiItsm8.7HIGH

31 March 2024

File Upload Vulnerability in Ivanti ITSM Before 2023.4 Allows Remote File Writes and Command Execution
CVE-2023-46808
IvantiItsm📰9.9CRITICAL