CVE-2024-44105

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

CVE-2024-44104

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103

Ivanti Workspace Control is affected by DLL hijacking in the management console prior to version 2025.2 (10.19.0.0). A locally authenticated attacker can escalate privileges due to an insecure DLL search path. Public sources corroborate that affected versions include 10.18.0.0 and earlier, with e...

CVE-2024-38259

Microsoft Management Console Remote Code Execution Vulnerability...

CVE-2024-38259

Microsoft Management Console Remote Code Execution Vulnerability...

CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability

...

CVE-2024-38259

CVE-2024-38259 (Microsoft Management Console Remote Code Execution) is a MMC component vulnerability with CVSS v3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). It affects MMC and is described with potential to execute code remotely when exploited. The MMC entry is listed in Microsoft/VC...

CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability

...

Microsoft Management Console Remote Code Execution Vulnerability

...

PT-2024-6588 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions before 2022 SU6 Ivanti EPM versions before the 2024 September update Description: The issue is related to SQL injection in the management console of Ivanti EPM, allowing a remote unauthenticated attacker to achieve remote...

CVE-2024-44106: Client-Side Enforcement of Server-Side Security

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

PT-2024-6587 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an uncontrolled search path element in the Ivanti Workspace Control software, which can be exploited to allow an attacker to escalate their privileges...

CVE-2024-38259: Use After Free

Microsoft Management Console Remote Code Execution Vulnerability...

PT-2024-6586 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...

Ivanti Workspace Control code-related vulnerabilities

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...

CVE-2024-8191: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2024-44103: Untrusted Search Path

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

Ivanti Workspace Control security vulnerabilities

Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...