Automation (Ivanti) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2026-07-02. Vendor: Ivanti.
CVEs of Automation
- CVE-2024-58352 - CVSS 8.7 (high), 2026-07-02: Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by…
- CVE-2026-23751 - CVSS 9.8 (critical), 2026-04-23: Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port…
- CVE-2024-9845 - CVSS 7.8 (high), 2024-12-11: Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local…
- CVE-2024-38656 - CVSS 9.1 (critical), 2024-11-13: Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote…
- CVE-2024-8320 - CVSS 5.3 (medium), 2024-09-10: Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof…
- CVE-2024-44106 - CVSS 8.8 (high), 2024-09-10: Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated…
- CVE-2024-44103 - CVSS 8.8 (high), 2024-09-10: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their…
- CVE-2024-44105 - CVSS 8.2 (high), 2024-09-10: Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…
- CVE-2024-44104 - CVSS 8.8 (high), 2024-09-10: An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version…
- CVE-2022-44569 - CVSS 8.8 (high), 2023-11-03: A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
