High severity8.8NVD Advisory· Published May 31, 2024· Updated Jun 17, 2026

CVE-2024-22059

Description

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.

Affected products

Ivanti/Neurons for ITSMllm-fuzzy
Ivanti/ITSMcpe-rescue
Range: 2023.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Security-Advisory-May-2024nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000