[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffyt64V3LxWgsRjd8dIiNvq0mNClmx2UoQ-maMeFPNM0":3,"g5a-family:ivanti\u002Fendpoint_manager_cloud_services_appliance":95,"g5a-ex:ivanti\u002Fendpoint_manager_cloud_services_appliance@*":96},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":55,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"ivanti","endpoint_manager_cloud_services_appliance",2,5,4,"2024-10-08",[14,18],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"4.5",0,false,{"version":19,"cve_count":9,"kev_count":9,"has_kev":4},"4.6","Endpoint Manager Cloud Services Appliance by Ivanti is a technology product with 2 tracked versions and 5 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":9,"kev_count":9,"has_kev":4},[25,33,39,45,51],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":32},"CVE-2021-44529","A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).","2021-12-08",9.8,"v3.1","Critical",0.99105,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":38},"CVE-2024-8963","Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.","2024-09-19",9.4,0.98607,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":4,"epssScore":44},"CVE-2024-9380","An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.",7.2,"High",0.58323,{"cveId":46,"description":47,"publishedDate":12,"cvssScore":48,"cvssVersion":30,"severity":49,"isKev":4,"epssScore":50},"CVE-2024-9379","SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.",6.5,"Medium",0.44268,{"cveId":52,"description":53,"publishedDate":12,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":17,"epssScore":54},"CVE-2024-9381","Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.",0.15551,[56,61,64,68],{"cveId":46,"description":47,"publishedDate":12,"cvssScore":48,"severity":49,"isKev":4,"epssScore":50,"cisaVulnName":57,"cisaDateAdded":58,"cisaShortDescription":59,"cisaRequiredAction":60},"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","2024-10-09","Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.","As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.",{"cveId":40,"description":41,"publishedDate":12,"cvssScore":42,"severity":43,"isKev":4,"epssScore":44,"cisaVulnName":62,"cisaDateAdded":58,"cisaShortDescription":63,"cisaRequiredAction":60},"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":31,"isKev":4,"epssScore":38,"cisaVulnName":65,"cisaDateAdded":36,"cisaShortDescription":66,"cisaRequiredAction":67},"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.","As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","2024-03-25","Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Endpoint Manager Cloud Services Appliance by Ivanti - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Endpoint Manager Cloud Services Appliance by Ivanti covering 2 versions with 5 tracked vulnerabilities including 2 critical and 1 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Endpoint Manager Cloud Services Appliance vulnerabilities, Endpoint Manager Cloud Services Appliance security, Endpoint Manager Cloud Services Appliance CVE, Ivanti Endpoint Manager Cloud Services Appliance, Endpoint Manager Cloud Services Appliance threat intelligence, Ivanti security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Endpoint Manager Cloud Services Appliance KEV, Endpoint Manager Cloud Services Appliance exploited vulnerabilities",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Endpoint Manager Cloud Services Appliance","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fivanti\u002Fendpoint_manager_cloud_services_appliance",{"@type":83,"name":84,"url":85},"Organization","Ivanti","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fivanti","Security Software","2 versions tracked",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Endpoint Manager Cloud Services Appliance Security Vulnerabilities","Security vulnerabilities affecting Endpoint Manager Cloud Services Appliance by Ivanti",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":93,"apiVersion":94},"2026-10-28T21:33:32.435Z","3.0",[],{"rows":97,"total":11,"capped":17,"failed":16},[98,103,107,113],{"cveId":46,"name":57,"severity":49,"cvss":48,"added":58,"epss":50,"published":99,"ranges":100,"checked":4,"hits":102,"covers":17},"2024-10-08T17:15:56.727",[101],"before 5.0.2",[],{"cveId":40,"name":62,"severity":43,"cvss":42,"added":58,"epss":44,"published":104,"ranges":105,"checked":4,"hits":106,"covers":17},"2024-10-08T17:15:56.97",[101],[],{"cveId":34,"name":65,"severity":31,"cvss":37,"added":36,"epss":38,"published":108,"ranges":109,"checked":4,"hits":112,"covers":17},"2024-09-19T18:15:10.6",[19,110,111],"4.6-patch_512","4.6-patch_518",[],{"cveId":26,"name":69,"severity":31,"cvss":29,"added":70,"epss":32,"published":114,"ranges":115,"checked":4,"hits":117,"covers":17},"2021-12-08T22:15:10.163",[116,19],"up to 4.5",[]]