5.5
Medium
CVE-2026-106035 An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a…
Description
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xtraction 2026.4 | earliest → < 2026.4 | 2026.4 |
Other CVEs of Xtraction
The 8 CVEs of Xtraction →
CVE-2026-106047
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a…
7.7
High
CVE-2026-106043
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
7.5
High
CVE-2026-106042
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
9.9
Critical
CVE-2026-106034
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to…
5.0
Medium