CVE-2024-22060

—

CVSS 3.1

4.9 medium

EPSS

1%p64

Published

May 31, 2024 (May 31, 2024)

Modified

Jun 17, 2026

Description

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.

Vendors: ivanti
Products: neurons for itsm
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news1 stories

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

The Hacker NewsMay 23, 09:21 UTC · May 23, 2024Vulnerability in the wildCVE-2024-29822 CVE-2024-29827 CVE-2024-29828+12 CVEs