9.4
Critical
Exploited
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.
Ransomware campaigns
Not observed so far
Weakness
CWE-22
Description
Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CSA (Cloud Services Appliance) 5.0 | earliest → < 5.0 | 5.0 |
| endpoint_manager_cloud_services_appliance 4.6 | earliest → < 4.6patch519 | 4.6patch519 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of CSA (Cloud Services Appliance)
The 6 CVEs of CSA (Cloud Services Appliance) →
CVE-2025-22460
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to…
7.8
High
CVE-2024-9381
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass…
7.2
High
CVE-2024-9380
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
7.2
High
CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
6.5
Medium