All packages
Ivanti CSA vulnerabilities
3 known CVE vulnerabilities in Ivanti CSA, translated and rated.
- CVE-2024-9380HighActively exploited
OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2. A remote authenticated attacker with admin privileges can obtain remote code execution.
- CVE-2024-9379MediumActively exploited
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
- CVE-2024-8963CriticalActively exploited
Path Traversal in Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.