GCVE - cpe:2.3:a:ivanti:cloud_services_appliance:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:cloud_services_appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ivanti (`40b984ad-e54c-5e1b-9aa1-2a4cd4d61129`)
Product	Cloud Services Appliance (`ec4d9ab9-b284-5dce-9fd1-b1da95e98ccd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-22460`	vulnerable	2026-06-08 07:10:53.179045	Details available HIGH (7.8) Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges. Published: 2025-05-13T15:09:30.912Z Updated: 2025-05-13T19:43:10.536Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CVE-2025-22460	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47908`	vulnerable	2026-06-08 06:48:13.427374	Details available CRITICAL (9.1) OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Published: 2025-02-11T15:18:49.425Z Updated: 2026-02-26T19:09:18.949Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11773`	vulnerable	2026-06-08 06:23:50.373142	Details available CRITICAL (9.1) SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. Published: 2024-12-10T18:56:08.742Z Updated: 2024-12-14T04:55:14.186Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-11639-CVE-2024-11772-CVE-2024-11773	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11772`	vulnerable	2026-06-08 06:23:50.372698	Details available CRITICAL (9.1) Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Published: 2024-12-10T18:55:44.312Z Updated: 2024-12-14T04:55:12.912Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-11639-CVE-2024-11772-CVE-2024-11773	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11771`	vulnerable	2026-06-08 06:23:50.372221	Details available MEDIUM (5.3) Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality. Published: 2025-02-11T15:19:11.855Z Updated: 2025-02-11T15:35:20.987Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11639`	vulnerable	2026-06-08 06:23:50.049589	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.