7.8
High
CVE-2025-22460 Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to…
Description
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CSA (Cloud Services Appliance) 5.0 | earliest → < 5.0.5 | 5.0.5 |
Other CVEs of CSA (Cloud Services Appliance)
The 6 CVEs of CSA (Cloud Services Appliance) →
CVE-2024-9381
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass…
7.2
High
CVE-2024-9380
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
7.2
High
CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
6.5
Medium
CVE-2024-8963
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
9.4
Critical