Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical9.9An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.Vuln · CVE-2026-109412 · Canadian Centre for Cyber Security · CVE.org · FIRST EPSS · IvantiEPSS 0.9%Oct 13, 2026
High8.8An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.Vuln · CVE-2026-9614 · NIST NVD · IvantiJun 1, 2026
Critical9.8An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gaiFix · CVE-2025-22462 · Ivanti · Neurons for ITSM (on-prem) · EUVD · IvantiEPSS 213.0%May 13, 2025
UnknownIvanti Connect Secure, Policy Secure, and Neurons stack-based buffer overflowVuln · CVE-2025-0283 · Ivanti · Connect Secure, Policy Secure, and Neurons · CVE.org · VulnCheck KEV · IvantiKEVJan 8, 2025
UnknownIvanti neurons_for_itsm Unrestricted Upload of File with Dangerous TypeVuln · CVE-2023-46808 · Ivanti · neurons_for_itsm · CVE.org · VulnCheck KEV · IvantiKEVMay 14, 2024
High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityVuln · CVE-2024-21893 · Ivanti · Connect Secure, Policy Secure, and Neurons · CISA KEV · CVE.org · FIRST EPSS · IvantiKEVEPSS 100.0%Jan 15, 2024