Skip to content

Vulnerabilities of Ivanti CSA (Cloud Services Appliance)

Is your version affected?

CVE Summary Score Published
CVE-2025-22460 Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to… 7.8 High May 13, 2025
CVE-2024-9381 Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass… 7.2 High Oct 8, 2024
CVE-2024-9380 Exploited Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability 7.2 High Oct 8, 2024
CVE-2024-9379 Exploited Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability 6.5 Medium Oct 8, 2024
CVE-2024-8963 Exploited Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability 9.4 Critical Sep 19, 2024
CVE-2024-8190 Exploited Ivanti Cloud Services Appliance OS Command Injection Vulnerability 7.2 High Sep 10, 2024

Other Ivanti products