CVE-2024-22059

published 2024-05-31

CVE-2024-22059: A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the…

Priority P3 52 high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ivanti	itsm	2023.3 – 2023.3	—
ivanti	neurons_for_itsm	< 2023.3	2023.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89