Vulnerabilidades do Ivanti Endpoint Manager Cloud Services Appliance
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ivanti Endpoint Manager Cloud Services Appliance: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance
CVE-2024-9379
Alta · 7.2
KEV Alta · 56 CWE-89 08/10/2024
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
CVE-2024-9380
Alta · 7.2
KEV Alta · 56 CWE-78 08/10/2024
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
CVE-2024-8963
Crítica · 9.1
KEV Urgente · 73 Exploit público CWE-22 19/09/2024
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
CVE-2021-44529
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-94 08/12/2021
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).