Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-22462

An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gai

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Neurons for ITSM (on-prem)

Default version status: affected

  • 2023.4 w/ May 2025 Security Patchunaffected
  • 2024.2 w/ May 2025 Security Patchunaffected
  • 2024.3 w/ May 2025 Security Patchunaffected

References