Veille CVE
Recherche « Ivanti Xtraction »
8 CVE
-
CVE-2026-106047 7.7 Élevée
Ivanti Xtraction
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.
-
CVE-2026-106043 7.5 Élevée
Ivanti Xtraction
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.
-
CVE-2026-106042 9.9 Critique
Ivanti Xtraction
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.
-
CVE-2026-106035 5.5 Moyenne
Ivanti Xtraction
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
-
CVE-2026-106034 5.0 Moyenne
Ivanti Xtraction
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.
-
CVE-2026-14903 6.5 Moyenne
ivanti Xtraction
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.
-
CVE-2026-14902 6.1 Moyenne
ivanti Xtraction
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
-
CVE-2026-8043 9.6 Critique
ivanti Xtraction
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks.