Cloud Services Appliance Security Vulnerabilities and Issues — Cloud Services Appliance CVE List

Lucene search

IvantiCloud Services Appliance

3 matches found

CVE•added 2024/10/08 5:15 p.m.•232 views

CVE-2024-9380

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

7.2CVSS7.2AI score0.83805EPSS

CVE•added 2024/10/08 5:15 p.m.•190 views

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

7.2CVSS6.8AI score0.83794EPSS

CVE•added 2024/10/08 5:15 p.m.•157 views

CVE-2024-9381

Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.

7.2CVSS6.7AI score0.09324EPSS