Ivanti Endpoint Manager Cloud Services Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Ivanti Endpoint Manager Cloud Services Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-44529 — CVSS 9.8 (critical) — actively exploited: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code…
• CVE-2024-8963 — CVSS 9.4 (critical) — actively exploited: Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
• CVE-2024-9380 — CVSS 7.2 (high) — actively exploited: An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker…
• CVE-2024-9381 — CVSS 7.2 (high): Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
• CVE-2024-9379 — CVSS 6.5 (medium) — actively exploited: SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to…