Workspace Control (Ivanti) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 75 known versions, newest CVE from 2025-06-10. Vendor: Ivanti.
CVEs of Workspace Control
- CVE-2025-5353 - CVSS 8.8 (high), 2025-06-10: A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.
- CVE-2025-22463 - CVSS 7.3 (high), 2025-06-10: A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.
- CVE-2025-22455 - CVSS 8.8 (high), 2025-06-10: A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.
- CVE-2024-8496 - CVSS 7.8 (high), 2024-12-11: Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve…
- CVE-2024-44106 - CVSS 8.8 (high), 2024-09-10: Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated…
- CVE-2024-8012 - CVSS 7.8 (high), 2024-09-10: An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated…
- CVE-2024-44107 - CVSS 8.8 (high), 2024-09-10: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their…
- CVE-2024-44105 - CVSS 8.2 (high), 2024-09-10: Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…
- CVE-2024-44104 - CVSS 8.8 (high), 2024-09-10: An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version…
- CVE-2024-44103 - CVSS 8.8 (high), 2024-09-10: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their…
- CVE-2022-21823 - CVSS 5.5 (medium), 2022-01-10: A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that could allow an attacker with locally…
- CVE-2019-19138 - CVSS 7.5 (high), 2021-12-15: Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity.
- CVE-2021-36235 - CVSS 7.8 (high), 2021-09-01: An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by…
- CVE-2019-17066 - CVSS 7.8 (high), 2020-05-18: In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because…
- CVE-2020-11533 - CVSS 5.5 (medium), 2020-04-04: Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).
- CVE-2019-16382 - CVSS 9.8 (critical), 2020-03-19: An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder…
- CVE-2019-19675 - CVSS 7.8 (high), 2019-12-17: In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an…
- CVE-2019-10885 - CVSS 7.8 (high), 2019-04-05: An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can…
- CVE-2018-15593 - CVSS 7.8 (high), 2018-10-15: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or…
- CVE-2018-15592 - CVSS 7.8 (high), 2018-10-15: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can execute processes with elevated…
- CVE-2018-15591 - CVSS 7.8 (high), 2018-10-15: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whitelisting…
- CVE-2018-15590 - CVSS 5.5 (medium), 2018-10-15: An issue was discovered in Ivanti Workspace Control before 10.3.0.0 and RES One Workspace, when file and folder security are configured. A local authenticated…
