Latest critical severity exploited vulnerabilities for "ivanti endpoint manager cloud services appliance"

Where

AND

Sort:

Versions

Ivanti Endpoint Manager Cloud Services ApplianceIvanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

Risk 88

Severity

9.4

Exploited

EPSS

96.80%

Path Traversal, SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.

1 / 2

Source: CISA

First published (updated )

CVE-2024-8963

Ivanti Endpoint Manager Cloud Services ApplianceIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Risk 99

Severity

9.8

Exploited

Code Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

1 / 2

First published (updated )

CVE-2021-44529

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.