Vulnerability index

Browse CVEs

467 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Avalanche CRITICAL 9.8
CVE-2020-12442

Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250.

Mitigation only
Fix from $2,300 2020-04-28
Workspace Control MEDIUM 5.5
CVE-2020-11533

Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).

Fix: 10.4.30.0+
Fix from $1,600 2020-04-04
Workspace Control CRITICAL 9.8
CVE-2019-16382

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp wor…

Patch available
Fix from $2,300 2020-03-19
Workspace Control HIGH 7.8
CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging…

Fix: 10.3.180.0+
Fix from $1,950 2019-12-17
Endpoint Manager CRITICAL 9.8
CVE-2019-10651

An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code executio…

Patch available
Fix from $2,300 2019-07-11
Connect Secure CRITICAL 9.8
CVE-2018-20810

Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8…

Mitigation only
Fix from $2,300 2019-06-28
Connect Secure CRITICAL 9.8
CVE-2018-20813

An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.

Mitigation only
Fix from $2,300 2019-06-28
Connect Secure HIGH 7.5
CVE-2018-20809

A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX bef…

Mitigation only
Fix from $1,950 2019-06-28
Connect Secure MEDIUM 6.1
CVE-2018-20814

An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before…

Mitigation only
Fix from $1,600 2019-06-28
Connect Secure MEDIUM 5.3
CVE-2018-20811

A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.

No fix yet
Fix from $1,600 2019-06-28
Connect Secure MEDIUM 6.1
CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3…

Mitigation only
Fix from $1,600 2019-06-28
Connect Secure MEDIUM 6.1
CVE-2018-20808

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not appl…

Mitigation only
Fix from $1,600 2019-06-28
Landesk Management Suite CRITICAL 9.8
CVE-2019-12377EPSS 6%

A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows…

No fix yet
Fix from $2,300 2019-06-03
Landesk Management Suite MEDIUM 6.3
CVE-2019-12375

Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote information disclosur…

Mitigation only
Fix from $1,600 2019-06-03
Landesk Management Suite CRITICAL 9.0
CVE-2019-12373

Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to …

Mitigation only
Fix from $2,300 2019-06-03
Connect Secure HIGH 8.8
CVE-2019-11509EPSS 8%

In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (…

Mitigation only
Fix from $1,950 2019-06-03
Landesk Management Suite HIGH 8.1
CVE-2019-12374

A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper user…

No fix yet
Fix from $1,950 2019-06-03
Connect Secure CRITICAL 10.0
CVE-2019-11510 KEVEPSS 100%

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can se…

Patch available
Fix from $2,300 2019-05-08
Connect Secure HIGH 7.2
CVE-2019-11508EPSS 15%

In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacke…

Patch available
Fix from $1,950 2019-05-08
Connect Secure MEDIUM 6.1
CVE-2019-11507

In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.

Patch available
Fix from $1,600 2019-05-08
Connect Secure CRITICAL 9.8
CVE-2019-11540EPSS 8%

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5…

No fix yet
Fix from $2,300 2019-04-26
Connect Secure HIGH 7.7
CVE-2019-11538EPSS 7%

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS pro…

No fix yet
Fix from $1,950 2019-04-26
Connect Secure HIGH 7.5
CVE-2019-11541

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication w…

Mitigation only
Fix from $1,950 2019-04-26
Connect Secure HIGH 7.2
CVE-2019-11539 KEVEPSS 99%

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse P…

Mitigation only
Fix from $1,950 2019-04-26
Connect Secure HIGH 7.2
CVE-2019-11542EPSS 66%

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse P…

No fix yet
Fix from $1,950 2019-04-26
Connect Secure MEDIUM 6.1
CVE-2019-11543

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 …

Mitigation only
Fix from $1,600 2019-04-26
Connect Secure HIGH 8.1
CVE-2019-11213

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain…

Fix: 5.3r7 / 8.3r7+
Fix from $1,950 2019-04-12
Workspace Control HIGH 7.8
CVE-2019-10885

An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed se…

Fix: 10.3.90.0+
Fix from $1,950 2019-04-05
Workspace Control HIGH 7.8
CVE-2018-15593

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted data…

Fix: 10.3.10.0+
Fix from $1,950 2018-10-15
Workspace Control HIGH 7.8
CVE-2018-15591

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whiteli…

Fix: 10.3.10.0+
Fix from $1,950 2018-10-15