PT-2026-32647

Name of the Vulnerable Software and Affected Versions Ivanti N-ITSM versions prior to 2025.4 Description Improper protection of an alternate path allows a remote authenticated attacker to retain access to the system even after their account has been disabled. Recommendations Update to version...

VulnCheck KEV: CVE-2023-46808

An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user...

PT-2024-2363 · Ivanti · Ivanti Itsm

Name of the Vulnerable Software and Affected Versions: Ivanti ITSM versions prior to 2023.4 Description: The issue is related to an file upload vulnerability, which allows an authenticated remote user to perform file writes to the server. This can lead to the execution of commands in the context ...