Browse CVEs

CRITICAL 9.8 CVE-2020-12442 Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250. Avalanche Mitigation only Fix from $2,3002020-04-28 MEDIUM 5.5 CVE-2020-11533 Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material). Workspace Control 10.4.30.0+ Fix from $1,6002020-04-04 CRITICAL 9.8 CVE-2019-16382 An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp wor… Workspace Control Patch available Fix from $2,3002020-03-19 HIGH 7.8 CVE-2019-19675 In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging… Workspace Control 10.3.180.0+ Fix from $1,9502019-12-17 CRITICAL 9.8 CVE-2019-10651 An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code executio… Endpoint Manager Patch available Fix from $2,3002019-07-11 CRITICAL 9.8 CVE-2018-20810 Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8… Connect Secure Mitigation only Fix from $2,3002019-06-28 CRITICAL 9.8 CVE-2018-20813 An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2. Connect Secure Mitigation only Fix from $2,3002019-06-28 HIGH 7.5 CVE-2018-20809 A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX bef… Connect Secure Mitigation only Fix from $1,9502019-06-28 MEDIUM 6.1 CVE-2018-20814 An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before… Connect Secure Mitigation only Fix from $1,6002019-06-28 MEDIUM 5.3 CVE-2018-20811 A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12. Connect Secure No fix yet Fix from $1,6002019-06-28 MEDIUM 6.1 CVE-2018-20807 An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3… Connect Secure Mitigation only Fix from $1,6002019-06-28 MEDIUM 6.1 CVE-2018-20808 An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not appl… Connect Secure Mitigation only Fix from $1,6002019-06-28 CRITICAL 9.8 CVE-2019-12377EPSS 6% A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows… Landesk Management Suite No fix yet Fix from $2,3002019-06-03 MEDIUM 6.3 CVE-2019-12375 Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote information disclosur… Landesk Management Suite Mitigation only Fix from $1,6002019-06-03 CRITICAL 9.0 CVE-2019-12373 Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to … Landesk Management Suite Mitigation only Fix from $2,3002019-06-03 HIGH 8.8 CVE-2019-11509EPSS 8% In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (… Connect Secure Mitigation only Fix from $1,9502019-06-03 HIGH 8.1 CVE-2019-12374 A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper user… Landesk Management Suite No fix yet Fix from $1,9502019-06-03 CRITICAL 10.0 CVE-2019-11510 KEVEPSS 100% In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can se… Connect Secure Patch available Fix from $2,3002019-05-08 HIGH 7.2 CVE-2019-11508EPSS 15% In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacke… Connect Secure Patch available Fix from $1,9502019-05-08 MEDIUM 6.1 CVE-2019-11507 In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page. Connect Secure Patch available Fix from $1,6002019-05-08 CRITICAL 9.8 CVE-2019-11540EPSS 8% In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5… Connect Secure No fix yet Fix from $2,3002019-04-26 HIGH 7.7 CVE-2019-11538EPSS 7% In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS pro… Connect Secure No fix yet Fix from $1,9502019-04-26 HIGH 7.5 CVE-2019-11541 In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication w… Connect Secure Mitigation only Fix from $1,9502019-04-26 HIGH 7.2 CVE-2019-11539 KEVEPSS 99% In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse P… Connect Secure Mitigation only Fix from $1,9502019-04-26 HIGH 7.2 CVE-2019-11542EPSS 66% In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse P… Connect Secure No fix yet Fix from $1,9502019-04-26 MEDIUM 6.1 CVE-2019-11543 XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 … Connect Secure Mitigation only Fix from $1,6002019-04-26 HIGH 8.1 CVE-2019-11213 In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain… Connect Secure 5.3r7 / 8.3r7+ Fix from $1,9502019-04-12 HIGH 7.8 CVE-2019-10885 An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed se… Workspace Control 10.3.90.0+ Fix from $1,9502019-04-05 HIGH 7.8 CVE-2018-15593 An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted data… Workspace Control 10.3.10.0+ Fix from $1,9502018-10-15 HIGH 7.8 CVE-2018-15591 An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whiteli… Workspace Control 10.3.10.0+ Fix from $1,9502018-10-15