GCVE - cpe:2.3:a:ivanti:automation:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:automation:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ivanti (`40b984ad-e54c-5e1b-9aa1-2a4cd4d61129`)
Product	Automation (`951facd3-c2fe-5fe1-9c79-853398a745a2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-9845`	vulnerable	2026-06-08 07:00:28.790369	Details available HIGH (7.8) Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation. Published: 2024-12-11T16:41:39.804Z Updated: 2024-12-19T04:55:29.963Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Automation-CVE-2024-9845	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-9845`	not_vulnerable	2026-06-08 07:00:28.790329	Details available HIGH (7.8) Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation. Published: 2024-12-11T16:41:39.804Z Updated: 2024-12-19T04:55:29.963Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Automation-CVE-2024-9845	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8320`	not_vulnerable	2026-06-08 07:00:24.236559	Details available MEDIUM (5.3) Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof Network Isolation status of managed devices. Published: 2024-09-10T20:52:31.146Z Updated: 2024-09-11T15:19:03.245Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44106`	not_vulnerable	2026-06-08 06:45:53.678274	Details available HIGH (8.8) Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges. Published: 2024-09-10T20:45:28.624Z Updated: 2025-06-12T17:06:34.123Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44105`	not_vulnerable	2026-06-08 06:45:53.677609	Details available HIGH (8.2) Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials. Published: 2024-09-10T20:43:26.618Z Updated: 2025-06-12T16:58:30.314Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44104`	not_vulnerable	2026-06-08 06:45:53.676878	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44103`	not_vulnerable	2026-06-08 06:45:53.675426	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38656`	vulnerable	2026-06-08 06:41:47.878466	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-44569`	vulnerable	2026-06-08 05:49:35.654527	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.