WC
Product
Workspace Control
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 18Medium 3Low 0
Watch
Add Workspace Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5353 | 7.8 | Jun 10 | A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials Affected: before 10.19.10.0 |
| CVE-2025-22455 | 7.8 | Jun 10 | A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials Affected: before 10.19.10.0 |
| CVE-2024-8496 | 7.8 | Dec 11 | Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege… Affected: 10.18.30.0 before 10.18.40.0 |
| CVE-2024-44107 | 7.8 | Sep 10 | DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and… Affected: before 10.18.99.0 |
| CVE-2024-44106 | 7.8 | Sep 10 | Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their… Affected: before 10.18.99.0 |
| CVE-2024-44105 | 7.8 | Sep 10 | Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to… Affected: before 10.18.99.0 |
| CVE-2024-44104 | 7.8 | Sep 10 | An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) … Affected: before 10.18.99.0 |
| CVE-2024-44103 | 7.8 | Sep 10 | DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges Affected: before 10.18.99.0 |
| CVE-2024-8012 | 7.8 | Sep 10 | An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate… Affected: before 10.18.99.0 |
| CVE-2021-36235 | 7.8 | Sep 1 | An issue was discovered in Ivanti Workspace Control before 10.6.30.0 Affected: before 10.6.30.0 |
| CVE-2019-17066 | 7.8 | May 18 | In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries Affected: before 10.4.40.0 |
| CVE-2019-19675 | 7.8 | Dec 17 | In Ivanti Workspace Control before 10.3.180.0 Affected: before 10.3.180.0 |
| CVE-2019-10885 | 7.8 | Apr 5 | An issue was discovered in Ivanti Workspace Control before 10.3.90.0 Affected: before 10.3.90.0 |
| CVE-2018-15593 | 7.8 | Oct 15 | An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace Affected: before 10.3.10.0 |
| CVE-2018-15592 | 7.8 | Oct 15 | An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace Affected: before 10.3.10.0 |
| CVE-2018-15591 | 7.8 | Oct 15 | An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace Affected: before 10.3.10.0 |
| CVE-2019-19138 | 7.5 | Dec 15 | Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity Affected: before 10.4.50.0 |
| CVE-2025-22463 | 7.3 | Jun 10 | A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password Affected: before 10.19.10.0 |
Showing 18