Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.Check if you run itEPSS 0.87%Oct 13, 2026
- High8.8An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.Check if you run itEPSS 1.21%Jun 1, 2026
- Critical9.8An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gaiCheck if you run itEPSS 2.13%May 13, 2025
- UnknownIvanti Connect Secure, Policy Secure, and Neurons stack-based buffer overflowPatch nowKEVEPSS 17.46%Jan 8, 2025
- UnknownIvanti neurons_for_itsm Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.00%May 14, 2024
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 100.00%Jan 15, 2024
6 records · page 1 of 1
PreviousNext