endpoint_manager_cloud_services_appliance vulnerabilities
CVEs whose affected-version data names the endpoint_manager_cloud_services_appliance package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-9379Medium· 6.5CISA KEV0dayPoCSQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
▾ Midnightivanti · endpoint_manager_cloud_services_applianceEPSS 44%via NVD
CVE-2021-44529Critical· 9.8CISA KEVPoCA code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
▾ Hadalivanti · endpoint_manager_cloud_services_applianceEPSS 99%via NVD