Medium severity4.9NVD Advisory· Published May 31, 2024· Updated Jun 17, 2026

CVE-2024-22060

Description

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.

Affected products

Ivanti/Neurons for ITSMllm-fuzzy
Ivanti/ITSMcpe-rescue
Range: 2023.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Security-Advisory-May-2024nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000