{"schemaVersion":3,"id":"CVE-2024-8963","aliases":[],"status":"published","duplicateOf":null,"title":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","description":"Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.","dates":{"published":"2024-09-19T17:14:49.386Z","modified":"2025-10-21T22:55:44.119Z","reserved":null,"kevAdded":["2024-09-19T00:00:00.000Z","2025-01-17T00:00:00.000Z"],"kevDue":["2024-10-10T00:00:00.000Z"]},"cvss":{"headline":{"score":9.4,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.4,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.98607,"percentile":0.99923,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.98607},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.98607,"percentile":0.99923}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.98607,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.98607,"percentile":0.99923}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2024-09-19T00:00:00.000Z","dueDate":"2024-10-10T00:00:00.000Z","requiredAction":"As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.","name":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","description":"Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.","notes":[{"type":"url","href":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963","label":"forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2024-8963","label":"nvd.nist.gov/vuln/detail/CVE-2024-8963"}],"vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null},{"source":"enisa","sourceLabel":"ENISA","dateAdded":"2025-01-17T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":"Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.","notes":[],"vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","ransomware":false,"ransomwareUse":null,"exploitationType":"unknown"}],"listedCount":2,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2024-09-19T00:00:00.000Z","dueDate":"2024-10-10T00:00:00.000Z","requiredAction":"As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.","name":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","description":"Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.","notes":[{"type":"url","href":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963","label":"forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2024-8963","label":"nvd.nist.gov/vuln/detail/CVE-2024-8963"}],"vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":true,"entry":{"source":"enisa","sourceLabel":"ENISA","dateAdded":"2025-01-17T00:00:00.000Z","dueDate":null,"requiredAction":null,"name":null,"description":"Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.","notes":[],"vendor":"Ivanti","product":"Cloud Services Appliance (CSA)","ransomware":false,"ransomwareUse":null,"exploitationType":"unknown"}},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"ivanti","product":"endpoint_manager_cloud_services_appliance","name":"endpoint manager cloud services appliance","label":"endpoint_manager_cloud_services_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.6","noFixRecorded":false,"fixedIn":null},{"text":"4.6:patch_512","noFixRecorded":false,"fixedIn":null},{"text":"4.6:patch_518","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.6 | 4.6:patch_512 | 4.6:patch_518","eol":null,"hubHref":"/vendor/ivanti/endpoint_manager_cloud_services_appliance"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963","label":"forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963","hostname":"forums.ivanti.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8963","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8963","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-19T17:14:49.386Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2024-09-19T00:00:00.000Z","label":"Added to CISA KEV","detail":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2024-10-10T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions.","source":"cisa"},{"kind":"kev-added","date":"2025-01-17T00:00:00.000Z","label":"Added to ENISA KEV","detail":"Added to the ENISA known exploited vulnerabilities catalog.","source":"enisa"},{"kind":"modified","date":"2025-10-21T22:55:44.119Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:25:12.562Z","stale":false,"partial":false}}