Files
vuln-nvd/data/2026/CVE-2026-4914.json
T

2 lines
2.0 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Neurons for ITSM (On-Premise)","vendor":"Ivanti","versions":[{"status":"unaffected","version":"2025.4"}]},{"defaultStatus":"affected","product":"Neurons for ITSM (Cloud)","vendor":"Ivanti","versions":[{"status":"unaffected","version":"2025.4"}]}],"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required."},{"lang":"es","value":"XSS almacenado en Ivanti N-ITSM anterior a la versión 2025.4 permite a un atacante remoto autenticado obtener información limitada de otras sesiones de usuario. Se requiere interacción del usuario."}],"id":"CVE-2026-4914","lastModified":"2026-10-25T23:10:00.167","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4914","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-14T17:19:55.903544Z","version":"2.0.3"}}]},"published":"2026-04-14T15:16:39.750","references":[{"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4914?language=en_US"}],"sourceIdentifier":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","type":"Secondary"}]}