CVE-2024-22060

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary…

High · published May 31, 2024

CVSS v3.0
8.7
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.

The record
Technical detail
CVSS v3.0
8.7 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01116 · 65.8th percentile
Published
2024-05-31T17:38Z
EPSS history
Timeline
  • 31 MAY 17:38Z
    An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary…
    cvelistv5