critical9.8
CVE-2025-22462
An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenti…
Impact
An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Neurons For Itsm | before 2023.4 Versions 2023.4, 2024.2, 2024.3 |