What’s Vulnerable › Vulnerabilities
CVE-2018-6316
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-02-15 · updated 2026-06-17
- Weakness: CWE-863
Description
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.
Affected products
- Ivanti Endpoint Security: through 8.5; 8.5-update_1
References
Get alerted when CVE-2018-6316 or the next vulnerability affects your stack