Ivanti Cloud Services Application

• CVE-2024-11771 Medium 5.3 Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality. 1.2%
• CVE-2024-47908 Critical 9.1 OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 22.3%
• CVE-2024-11773 Critical 9.1 SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. 23.3%
• CVE-2024-11772 Critical 9.1 Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 7.7%
• CVE-2024-11639 Critical 10.0 An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access 4.9%