agentprime: ivanti-csa-cloud-services-applianceEvery new CVE for ivanti-csa-cloud-services-appliance.https://agentprime.io/CVE-2025-22460: Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.https://agentprime.io/advisories/CVE-2025-22460/https://agentprime.io/advisories/CVE-2025-22460/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 15:09:30 GMTCVECVE-2024-9381: Path traversal in Ivanti CSA (Cloud Services Appliance)https://agentprime.io/advisories/CVE-2024-9381/https://agentprime.io/advisories/CVE-2024-9381/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:25:27 GMTCVEcriticalCVE-2024-9380: Command injection in Ivanti CSA (Cloud Services Appliance)https://agentprime.io/advisories/CVE-2024-9380/https://agentprime.io/advisories/CVE-2024-9380/CVSS 7.2 (High). Critical: In CISA’s KEV catalogue since 9 Oct 2024: it is known to be exploited. CVSS score 7.2 (7.0 or more) and EPSS 0.58 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:23:49 GMTCVEcriticalKEVCVE-2024-9379: SQL injection in Ivanti CSA (Cloud Services Appliance)https://agentprime.io/advisories/CVE-2024-9379/https://agentprime.io/advisories/CVE-2024-9379/CVSS 6.5 (Medium). Critical: In CISA’s KEV catalogue since 9 Oct 2024: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Oct 2024 16:23:13 GMTCVEcriticalKEVCVE-2024-8963: Path traversal in Ivanti CSA (Cloud Services Appliance)https://agentprime.io/advisories/CVE-2024-8963/https://agentprime.io/advisories/CVE-2024-8963/CVSS 9.4 (Critical). Critical: In CISA’s KEV catalogue since 19 Sept 2024: it is known to be exploited. CVSS score 9.4: 9.0 or more. CVSS score 9.4 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Sep 2024 17:14:49 GMTCVEcriticalKEVCVE-2024-8190: OS command injection in Ivanti CSA (Cloud Services Appliance)https://agentprime.io/advisories/CVE-2024-8190/https://agentprime.io/advisories/CVE-2024-8190/CVSS 7.2 (High). Critical: In CISA’s KEV catalogue since 13 Sept 2024: it is known to be exploited. CVSS score 7.2 (7.0 or more) and EPSS 0.89 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Sep 2024 20:33:44 GMTCVEcriticalKEV