← Database

CVE-2026-4914

MEDIUM CVSS: 5.4 Published: 2026-04-14 Modified: 2026-06-17

Description

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

Affected Platforms

Unknown

Weakness Type

CWE-79

References