Ivanti Endpoint Manager Cloud Services Appliance vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ivanti Endpoint Manager Cloud Services Appliance: 4 record(s), with affected versions and fixes.
cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance

CVE-2024-9379 High · 7.2 KEV High · 56 CWE-89 Oct 8, 2024

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

CVE-2024-9380 High · 7.2 KEV High · 56 CWE-78 Oct 8, 2024

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

CVE-2024-8963 Critical · 9.1 KEV Urgent · 73 Public exploit CWE-22 Sep 19, 2024

Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

CVE-2021-44529 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-94 Dec 8, 2021

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).