Login Request a demo
CC
Product
CSA (Cloud Services Appliance)
by Ivanti · last CVE May 13, 2025
On CISA KEVExploited in the wild
6
CVEs
4
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 0
Severity
All severities6Critical1High5Medium0Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add CSA (Cloud Services Appliance) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9380
In wildKEV
7.2
58%
Oct 8
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Affected: All versions, or not specified
CVE-2024-9379
In wildKEV
7.2
44%
Oct 8
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
Affected: All versions, or not specified
CVE-2024-8190
In wildKEV
7.2
89%
Sep 10
Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Affected: All versions, or not specified
CVE-2025-22460
7.8
0%
May 13
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges
Affected: All versions, or not specified
CVE-2024-9381
7.2
16%
Oct 8
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions
Affected: All versions, or not specified
Showing 5