Vulnerabilidades do Ivanti Xtraction
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ivanti Xtraction: 6 registro(s), com versões afetadas e correções.cpe:2.3:a:ivanti:xtraction
CVE-2026-106047
Alta · 7.7
CWE-22 13/10/2026
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before...
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.
CVE-2026-106043
Alta · 7.5
CWE-306 13/10/2026
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version...
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.
CVE-2026-106042
Crítica · 9.9
CWE-73 13/10/2026
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4...
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.
CVE-2026-106035
Média · 5.5
CWE-532 13/10/2026
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before...
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
CVE-2026-106034
Média · 5.0
CWE-22 13/10/2026
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote...
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.
CVE-2026-8043
Crítica · 9.6
CWE-73 12/05/2026
External control of a file name in Ivanti Xtraction before version 2026.2 allows a…
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks.