5.5
Moyenne
CVE-2026-106035 An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a…
Description
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Xtraction 2026.4 | premières → < 2026.4 | 2026.4 |
Références
- hub.ivanti.com hub.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Xtraction
Les 8 CVE de Xtraction →
CVE-2026-106047
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a…
7.7
Élevée
CVE-2026-106043
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
7.5
Élevée
CVE-2026-106042
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
9.9
Critique
CVE-2026-106034
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to…
5.0
Moyenne