CVE-2026-4914 | BDVDB-2026-326783 Detail
IvantiNeurons for ITSM (On-Premise)
Description#
Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.
Impact#
CAPEC-592 Stored XSS
Weaknesses#
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.