CVE-2026-4914
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Apr 14, 2026
Vendor
unknown
Description
Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.