Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2018-6316

Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.

  • Published: Feb 16, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-6316
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
ivanti / endpoint_security 8.5-update_1 8.5-update_1.x
ivanti / endpoint_security - 8.5.x