CVE-2025-22462

critical · 9.8

An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system.

9.8

CVSS

2.1%

EPSS (exploit prob.)

81st

EPSS percentile

2025-05-13

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-288

Affected products

Vendor	Product	Affected versions
ivanti	neurons_for_itsm	< 2023.4
ivanti	neurons_for_itsm	2023.4
ivanti	neurons_for_itsm	2024.2
ivanti	neurons_for_itsm	2024.3

Check a specific version with /api/v1/cve/match.

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-on-premises-only-CVE-2025-22462

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-22462