Ivanti Neurons for ITSM Flaws Allow Persistent Access, XSS

Executive Summary

Two authenticated flaws may allow disabled users to retain access and enable stored XSS to read limited data from other sessions with user interaction.

Key Details

Affected Platform

Ivanti Neurons

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

Ivanti Neurons for ITSM, both on‑premise and cloud, versions 2025.3 and earlier are affected. Cloud instances were patched by Ivanti in Dec 2025.

Operational Impact

If unpatched, access might persist for disabled users and some data from other sessions may be exposed, undermining access revocation and data controls.

Technical Root Cause

One flaw stems from improper protection of an alternate access path, bypassing account disablement. The other is stored XSS in the application interface.

Recommended Mitigation

Upgrade all affected Ivanti ITSM instances to 2025.4 after testing.
Strengthen vulnerability management, least privilege, segmentation, and exploit protection.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Use Ivanti’s advisory for version and fix details, and official CVE entries for these flaws. Align internal actions with documented safeguards and testing practices.