PatchTheCVEworkspace control vulnerabilities and fixes
Recent CVEs affecting workspace control, with upgrade or downgrade steps. 10 tracked.
Also searched as: workspacecontrol.
workspace control has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-06-10. Highest priority: CVE-2025-5353 (score 39/100).
- CVE-2025-5353 HIGH 8.8 UPGRADE A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to
- CVE-2025-22463 HIGH 7.3 UPGRADE A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to
- CVE-2025-22455 HIGH 8.8 UPGRADE A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to
- CVE-2024-8496 HIGH 7.8 UPGRADE Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allow
- CVE-2024-8012 HIGH 7.8 UPGRADE An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 202
- CVE-2024-44107 HIGH 8.8 UPGRADE DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a
- CVE-2024-44106 HIGH 8.8 UPGRADE Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2
- CVE-2024-44105 HIGH 8.2 UPGRADE Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before v
- CVE-2024-44104 HIGH 8.8 UPGRADE An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management cons
- CVE-2024-44103 HIGH 8.8 UPGRADE DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a
FAQ
How do I fix workspace control vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is workspace control being exploited right now?
None of the tracked workspace control CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which workspace control CVE should I patch first?
CVE-2025-5353 currently ranks highest (39/100): A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to.