CVE 5.4 MEDIUM

CVE-2026-4914_CVE-2026-4914

5.4 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

Basic Information

ID CVE-2026-4914
Source ivanti
Published Apr 14, 2026 at 14:15

Affected Product

Vendor Ivanti
Product Neurons for ITSM (On-Premise)
Version 2025.4

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.