Ivanti Endpoint Manager Cloud Services Appliance vulnerabilities

5 vulnerabilities

Known vulnerabilities in Ivanti Endpoint Manager Cloud Services Appliance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-44529ivantiendpoint_manager_cloud_services_applianceKEVRansomware
EPSS score
99.11%
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).7.2CVE-2024-9381ivantiendpoint_manager_cloud_services_appliance
EPSS score
15.55%
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.7.2CVE-2024-9380ivantiendpoint_manager_cloud_services_applianceKEV
EPSS score
59.65%
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.7.2CVE-2024-9379ivantiendpoint_manager_cloud_services_applianceKEV
EPSS score
43.78%
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.9.4CVE-2024-8963ivantiendpoint_manager_cloud_services_applianceKEV
EPSS score
98.61%
Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.