Veille CVE

Recherche « Ivanti CSA (Cloud Services Appliance) »

4 CVE

Critique 1 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ivanti CSA (Cloud Services Appliance) » ✕
  1. CVE-2024-9380 7.2 Élevée Exploitée

    Ivanti CSA (Cloud Services Appliance) · ivanti endpoint_manager_cloud_services_appliance · Ivanti endpoint manager cloud services appliance

    An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

  2. CVE-2024-9379 7.2 Élevée Exploitée

    Ivanti CSA (Cloud Services Appliance) · Ivanti endpoint manager cloud services appliance

    SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

  3. CVE-2024-8963 9.1 Critique Exploitée

    Ivanti CSA (Cloud Services Appliance) · ivanti endpoint_manager_cloud_services_appliance · Ivanti endpoint manager cloud services appliance

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

  4. CVE-2024-8190 7.2 Élevée Exploitée

    Ivanti CSA (Cloud Services Appliance) · ivanti endpoint_manager_cloud_services_appliance · Ivanti cloud services appliance

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.