A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/modify/delete information in the underlying database. This may also lead to DoS.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')