Advisories · Technology

Ivanti CSA (Cloud Services Appliance).

Every CVE that names Ivanti CSA (Cloud Services Appliance) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22460 CVE record

CVSS 7.8 High

Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.
- Ivanti CSA (Cloud Services Appliance)
- CWE-1392
Not analysed yet 13 May 2025
CVE-2024-9381 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Path traversal in Ivanti CSA (Cloud Services Appliance)
- Ivanti CSA (Cloud Services Appliance)
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-9380 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Command injection in Ivanti CSA (Cloud Services Appliance)
- Ivanti CSA (Cloud Services Appliance)
- Command injection
Not analysed yet 8 Oct 2024
CVE-2024-9379 CVE record

CVSS 6.5 MediumCritical · KEVKEV

SQL injection in Ivanti CSA (Cloud Services Appliance)
- Ivanti CSA (Cloud Services Appliance)
- SQL injection
Not analysed yet 8 Oct 2024
CVE-2024-8963 CVE record

CVSS 9.4 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Path traversal in Ivanti CSA (Cloud Services Appliance)
- Ivanti CSA (Cloud Services Appliance)
- Path traversal
Not analysed yet 19 Sept 2024
CVE-2024-8190 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

OS command injection in Ivanti CSA (Cloud Services Appliance)
- Ivanti CSA (Cloud Services Appliance)
- Command injection
Not analysed yet 10 Sept 2024