CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-09-10
Ivanti Cloud Services Appliance (CSA) OS Command Injection and Remote Code Execution Vulnerability (CVE-2024-8190) Security Advisory
[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions 4.6 Patch 518 and prior
[Impact] A remote authenticated attacker with admin-level privileges can inject arbitrary OS commands, leading to remote code execution and full system compromise
[Mitigation] Immediately upgrade to the supported Ivanti CSA 5.0 version or apply the latest security patches to mitigate active exploitation risks