VYPR
High severity8.8NVD Advisory· Published May 31, 2024· Updated Jun 17, 2026

CVE-2024-22059

CVE-2024-22059

Description

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.

Affected products

3
  • cpe:2.3:a:ivanti:neurons_for_itsm:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ivanti:neurons_for_itsm:*:*:*:*:*:*:*:*range: <2023.3
    • (no CPE)
  • Ivanti/ITSMcpe-rescue
    Range: 2023.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.