GCVE - cpe:2.3:a:ivanti:xtraction:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:xtraction:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ivanti (`40b984ad-e54c-5e1b-9aa1-2a4cd4d61129`)
Product	Xtraction (`2568a81b-5d25-5f34-b9a1-0d4db7154cb6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-106042`	not_vulnerable	2026-11-03 10:16:14.010989	Details available CRITICAL (9.9) An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application. Published: 2026-10-13T16:12:00.920Z Updated: 2026-10-14T10:51:05.227Z Open on db.gcve.eu Reference links https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-106047`	not_vulnerable	2026-11-03 10:16:13.629672	Details available HIGH (7.7) A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files. Published: 2026-10-13T16:19:39.517Z Updated: 2026-10-13T19:31:30.672Z Open on db.gcve.eu Reference links https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-14903`	not_vulnerable	2026-07-29 00:26:17.647027	Details available HIGH (7.7) Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root. Published: 2026-07-14T14:26:09.246Z Updated: 2026-07-14T14:45:41.619Z Open on db.gcve.eu Reference links https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?language=en_US	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-14902`	not_vulnerable	2026-07-29 00:26:17.646725	Details available MEDIUM (4) An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs. Published: 2026-07-14T14:23:14.584Z Updated: 2026-07-14T14:49:48.989Z Open on db.gcve.eu Reference links https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?language=en_US	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-8043`	vulnerable	2026-06-08 08:08:57.984548	Details available CRITICAL (9.6) External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks. Published: 2026-05-12T14:11:30.204Z Updated: 2026-05-12T15:44:12.334Z Open on db.gcve.eu Reference links https://hub.ivanti.com/s/article/Security-Advisory---Ivanti-Xtraction-CVE-2026-8043?language=en_US	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-8043`	not_vulnerable	2026-06-08 08:08:57.984400	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Xtraction

Notes

PURL mappings

Vulnerability references

Contribute