CPE Details
Ivanti Cloud Services Appliance 4.6
4.6
2024-12-24
17h42 +00:00
17h42 +00:00
2024-12-24
17h42 +00:00
17h42 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:ivanti:cloud_services_appliance:4.6:-:*:*:*:*:*:*
Informations
Vendor
ivantiProduct
cloud_services_applianceVersion
4.6Update
-Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | 9.1 |
Critical |
||
| SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. | 9.1 |
Critical |
||
| Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | 9.1 |
Critical |
||
| An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access | 10 |
Critical |
||
| An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability. | 7.2 |
High |
