| CVE-2024-9845 |
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local…
|
7.8
Élevée
|
11 déc. 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-8320 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.3
Moyenne
|
10 sept. 2024 |
| CVE-2024-44106 |
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…
|
8.8
Élevée
|
10 sept. 2024 |
| CVE-2024-44105 |
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…
|
8.2
Élevée
|
10 sept. 2024 |
| CVE-2024-44104 |
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of…
|
8.8
Élevée
|
10 sept. 2024 |
| CVE-2024-44103 |
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…
|
8.8
Élevée
|
10 sept. 2024 |
| CVE-2022-44569 |
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process…
|
8.8
Élevée
|
3 nov. 2023 |