PT-2026-32648 · Ivanti · Ivanti Itsm

Published 2026-04-14 · Updated 2026-04-19 · CVE-2026-4914

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ivanti N-ITSM versions prior to 2025.4

Description Stored Cross-Site Scripting (XSS) allows a remote authenticated attacker to obtain limited information from other user sessions. This issue requires user interaction to be exploited.

Recommendations Update to version 2025.4 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-4914

Affected Products

Ivanti Itsm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-4914 · Security Note
• https://twitter.com/CVEnew/status/2045889794899657172 · Twitter Post
• https://twitter.com/0dayPublishing/status/2044112133596615031 · Twitter Post
• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4914?language=en_US · Note
• https://twitter.com/infoflowcloud/status/2045891299455168747 · Twitter Post
• https://twitter.com/TweetThreatNews/status/2044426790161068105 · Twitter Post