Lucene search

K
vulnrichmentHackeroneVULNRICHMENT:CVE-2021-44529
HistoryDec 08, 2021 - 12:00 a.m.

CVE-2021-44529

2021-12-0800:00:00
CWE-94
hackerone
github.com
1

8 High

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Ivanti EPM",
    "versions": [
      {
        "version": "4.6.0-512",
        "status": "affected"
      }
    ]
  }
]