[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBg-WIOjPbNCmaSyWT8WrFzNLy34QuuVVEr21SBDIh4Y":3,"g5a-family:ivanti\u002Fcloud_services_appliance":89,"g5a-ex:ivanti\u002Fcloud_services_appliance@*":90},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":61,"seoMetadata":67,"meta":86},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":25},"ivanti","cloud_services_appliance",5,1,"2025-02-11",[13,17,19,21,23],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"4.5",0,false,{"version":18,"cve_count":10,"kev_count":10,"has_kev":4},"4.6",{"version":20,"cve_count":15,"kev_count":15,"has_kev":16},"5.0",{"version":22,"cve_count":15,"kev_count":15,"has_kev":16},"5.0.3",{"version":24,"cve_count":15,"kev_count":15,"has_kev":16},"5.0.5","Cloud Services Appliance by Ivanti is a technology product with 5 tracked versions and 5 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30,31],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},{"version":18,"cve_count":10,"kev_count":10,"has_kev":4},{"version":20,"cve_count":15,"kev_count":15,"has_kev":16},{"version":22,"cve_count":15,"kev_count":15,"has_kev":16},{"version":24,"cve_count":15,"kev_count":15,"has_kev":16},[33,41,48,52,56],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2024-8190","An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.","2024-09-10",7.2,"v3.1","High",0.88535,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":16,"epssScore":47},"CVE-2024-11773","SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.","2024-12-10",9.1,"Critical",0.23309,{"cveId":49,"description":50,"publishedDate":11,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":16,"epssScore":51},"CVE-2024-47908","OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.",0.22331,{"cveId":53,"description":54,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":16,"epssScore":55},"CVE-2024-11772","Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.",0.07653,{"cveId":57,"description":58,"publishedDate":44,"cvssScore":59,"cvssVersion":38,"severity":46,"isKev":16,"epssScore":60},"CVE-2024-11639","An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access",10,0.04869,[62],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":63,"cisaDateAdded":64,"cisaShortDescription":65,"cisaRequiredAction":66},"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","2024-09-13","Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.","As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.",{"title":68,"metaDescription":69,"keywords":70,"structuredData":71},"Cloud Services Appliance by Ivanti - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Cloud Services Appliance by Ivanti covering 5 versions with 5 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloud Services Appliance vulnerabilities, Cloud Services Appliance security, Cloud Services Appliance CVE, Ivanti Cloud Services Appliance, Cloud Services Appliance threat intelligence, Ivanti security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Cloud Services Appliance KEV, Cloud Services Appliance exploited vulnerabilities",{"@context":72,"@type":73,"name":74,"description":69,"url":75,"manufacturer":76,"applicationCategory":80,"softwareVersion":81,"mainEntity":82},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloud Services Appliance","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fivanti\u002Fcloud_services_appliance",{"@type":77,"name":78,"url":79},"Organization","Ivanti","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fivanti","Security Software","5 versions tracked",{"@type":83,"name":84,"description":85,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Cloud Services Appliance Security Vulnerabilities","Security vulnerabilities affecting Cloud Services Appliance by Ivanti",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":87,"apiVersion":88},"2026-10-28T19:32:00.777Z","3.0",[],{"rows":91,"total":10,"capped":16,"failed":15},[92],{"cveId":34,"name":63,"severity":39,"cvss":37,"added":64,"epss":40,"published":93,"ranges":94,"checked":4,"hits":96,"covers":16},"2024-09-10T21:15:14.697",[18,95],"4.6-patch_518",[]]