Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 09/10/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager cloud services appliance | < 5.0.2 | 5.0.2 |
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free