Ivanti Application Control vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ivanti Application Control, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2024-11598ivantiapplication_control
EPSS score
0.21%
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation.7.8CVE-2024-10630ivantiapplication_control+1
EPSS score
0.23%
A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.