CISA Adds One Known Exploited Vulnerability to Catalog

🗓️ 19 Sep 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 4 Views

CISA added CVE-2024-8963 Ivanti Cloud Services Appliance path traversal to the Known Exploited Vulnerabilities Catalog.

Reporter	Title	Published	Views	Family All 34
GithubExploit	Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance	4 Mar 202511:34	–	githubexploit
GithubExploit	Exploit for Path Traversal in Ivanti Endpoint_Manager_Cloud_Services_Appliance	13 Nov 202414:12	–	githubexploit
ATTACKERKB	CVE-2024-8963	19 Sep 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Cloud Services Appliance’s network interface, related to incorrect path name restrictions for the restricted access catalog, allows a hacker to execute arbitrary code.	4 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-8963	19 Sep 202421:10	–	circl
ICS	CISA Adds One Known Exploited Vulnerability to Catalog	19 Sep 202412:00	–	ics
CISA KEV Catalog	Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability	19 Sep 202400:00	–	cisa_kev
CISA	CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications	22 Jan 202512:00	–	cisa
CISA	Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance	19 Sep 202412:00	–	cisa
CNNVD	Ivanti Cloud Services Appliance 安全漏洞	19 Sep 202400:00	–	cnnvd

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

19 Sep 2024 12:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.1 - 9.4

EPSS0.98557

SSVC

known exploited vulnerabilities ivanti cloud services path traversal vulnerability