EM
Product
Endpoint Manager Cloud Services Appliance
by Ivanti · last CVE Oct 8, 2024
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 0Low 0
Watch

Add Endpoint Manager Cloud Services Appliance to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-44529
RansomwareIn wildKEV
9.8
99%
Dec 8
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Affected: through 4.5; 4.6
CVE-2024-8963
In wildKEV
9.1
99%
Sep 19
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
Affected: 4.6; 4.6; 4.6
CVE-2024-9380
In wildKEV
7.2
58%
Oct 8
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Affected: before 5.0.2
CVE-2024-9379
In wildKEV
7.2
44%
Oct 8
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
Affected: before 5.0.2
CVE-2024-8190
In wildKEV
7.2
89%
Sep 10
Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Affected: before 5.0
CVE-2024-9381
7.2
16%
Oct 8
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions
Affected: before 5.0.2
Showing 6