Ivanti Neurons for ITSM

Name: Ivanti Neurons for ITSM
Brand: Ivanti

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high0medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-12745US	—	2.94% (87th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12744US	—	2.94% (87th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2025-22462US	—OT elevated	2.13% (82nd)	—	2024.3 May 2025 Security Patch	2025-05-13	3 versions
CVE-2026-12650US	high8.8	1.94% (80th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12651US	—	1.94% (80th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12648US	—	1.94% (80th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12647US	high8.8OT elevated	1.52% (75th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12646US	high8.8OT elevated	1.52% (75th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-12645US	high8.8OT elevated	1.52% (75th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-9614US	—	1.44% (73rd)	—	no fix	2026-06-01	5 versions
CVE-2026-4913US	—	0.59% (48th)	—	2025.4	2026-04-14	< 2025.4
CVE-2026-4914US	—	0.34% (28th)	—	2025.4	2026-04-14	< 2025.4

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data5 CVEs
CWE-862Missing Authorization3 CVEs
CWE-284Improper Access Control1 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVEs
CWE-424Improper Protection of Alternate Path1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.