CVE-2024-47908

🗓️ 11 Feb 2025 15:18:49Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 96 Views

OS command injection vulnerability in Ivanti CSA allows remote code execution for admin users.

Reporter	Title	Published	Views	Family All 20
attackerkb	CVE-2024-47908	11 Feb 202516:15	–	attackerkb
BDU FSTEC	The vulnerability in the web console of the network device Ivanti Cloud Services Application allows a hacker to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-47908	11 Feb 202515:23	–	circl
CNNVD	Ivanti CSA 路径遍历漏洞	11 Feb 202500:00	–	cnnvd
CNNVD	Ivanti CSA 操作系统命令注入漏洞	11 Feb 202500:00	–	cnnvd
CNVD	Ivanti CSA OS Command Injection Vulnerability	17 Feb 202500:00	–	cnvd
Cvelist	CVE-2024-47908	11 Feb 202515:18	–	cvelist
EUVD	EUVD-2025-4980	11 Feb 202515:18	–	euvd
EUVD	EUVD-2025-4984	3 Oct 202520:07	–	euvd
Ivanti	Security Advisory Ivanti Cloud Services Application (CSA) (CVE-2024-47908, CVE-2024-11771)	11 Feb 202515:00	–	ivanti

NVD

Vulners

Node

ivanti cloud_services_applianceRange<5.0.5

[
  {
    "defaultStatus": "affected",
    "product": "Cloud Services Application",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.0.5",
        "versionType": "custom"
      }
    ]
  }
]