High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-12-11	CVE-2024-9845	Incorrect Default Permissions vulnerability in Ivanti Automation Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation. local low complexity ivanti CWE-276	7.8
2023-11-03	CVE-2022-44569	Improper Authentication vulnerability in Ivanti Automation A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication. local low complexity ivanti CWE-287	7.8