7.2
High
CVE-2024-9381 Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass…
Description
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CSA (Cloud Services Appliance) 5.0 | earliest → < 5.0.2 | 5.0.2 |
| endpoint_manager_cloud_services_appliance 5.0 | earliest → < 5.0.2 | 5.0.2 |
Other CVEs of CSA (Cloud Services Appliance)
The 6 CVEs of CSA (Cloud Services Appliance) →
CVE-2025-22460
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to…
7.8
High
CVE-2024-9380
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
7.2
High
CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
6.5
Medium
CVE-2024-8963
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
9.4
Critical