Ivanti Cloud Services Appliance OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 13/09/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| cloud services appliance | = 4.6 |
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free