Ivanti Endpoint Manager Cloud Services Appliance vulnerabilities
5 CVEs affecting Ivanti Endpoint Manager Cloud Services Appliance, 4 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9381, published 2024-10-08.
More from Ivanti.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability, published 2021-12-08. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-03-25. EPSS: 99.1% chance of exploitation in the next 30 days. A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
- CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability, published 2024-09-19. Critical severity, CVSS 9.1. Actively exploited: in CISA KEV since 2024-09-19. EPSS: 98.6% chance of exploitation in the next 30 days. Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
- CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability, published 2024-10-08. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2024-10-09. EPSS: 59.7% chance of exploitation in the next 30 days. An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
- CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability, published 2024-10-08. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2024-10-09. EPSS: 43.8% chance of exploitation in the next 30 days. SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
- CVE-2024-9381, published 2024-10-08. High severity, CVSS 7.2. EPSS: 15.6% chance of exploitation in the next 30 days. Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.