CVE-2021-44529

🗓️ 08 Dec 2021 00:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 250 Views

A code injection vulnerability in Ivanti EPM Cloud Services Appliance (CSA) allows arbitrary code execution by unauthenticated user

Reporter	Title	Published	Views	Family All 29
zdt	Ivanti Endpoint Manager 4.6 - Remote Code Execution Vulnerability	22 Mar 202200:00	–	zdt
zdt	Ivanti Cloud Services Appliance (CSA) Command Injection Exploit	19 Jan 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Ivanti Endpoint_Manager_Cloud_Services_Appliance	17 Apr 202205:56	–	githubexploit
GithubExploit	Exploit for Code Injection in Ivanti Endpoint_Manager_Cloud_Services_Appliance	24 Mar 202203:58	–	githubexploit
ATTACKERKB	CVE-2021-44529	8 Dec 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Cloud Services Appliance’s network interface lies in the incorrect path name restrictions, which, due to improper code generation, allow a hacker to execute arbitrary code.	29 Aug 202500:00	–	bdu_fstec
Circl	CVE-2021-44529	9 Dec 202100:24	–	circl
CISA KEV Catalog	Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability	25 Mar 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	25 Mar 202412:00	–	cisa
CNNVD	Ivanti Endpoint Manager 代码注入漏洞	8 Dec 202100:00	–	cnnvd

NVD

Vulners

Vulnrichment

Node

ivanti endpoint_manager_cloud_services_applianceRange≤4.5

ivanti endpoint_manager_cloud_services_applianceMatch4.6-

[
  {
    "vendor": "n/a",
    "product": "Ivanti EPM",
    "versions": [
      {
        "version": "4.6.0-512",
        "status": "affected"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/SA-2021-12-02
packetstormsecurity	www.packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html
packetstormsecurity	www.packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

04 Aug 2026 05:16Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.99105

SSVC