cloud services appliance vulnerabilities and fixes

Recent CVEs affecting cloud services appliance, with upgrade or downgrade steps. 7 tracked.

Also searched as: cloudservicesappliance.

cloud services appliance has 7 tracked vulnerabilities, 4 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2025-05-13. Highest priority: CVE-2024-8190 (score 80/100).

• CVE-2025-22460 HIGH 7.8 UPGRADE Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated att
• CVE-2024-8190 HIGH 7.2 EXPLOITED DOWNGRADE Ivanti Cloud Services Appliance OS Command Injection Vulnerability
• CVE-2024-47908 CRITICAL 9.1 UPGRADE OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated
• CVE-2024-11773 CRITICAL 9.1 UPGRADE SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attack
• CVE-2024-11772 CRITICAL 9.1 UPGRADE Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated at
• CVE-2024-11771 MEDIUM 5.3 UPGRADE Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricte
• CVE-2024-11639 CRITICAL 10.0 UPGRADE An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated a

FAQ

How do I fix cloud services appliance vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cloud services appliance being exploited right now?

Yes: 1 cloud services appliance CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which cloud services appliance CVE should I patch first?

CVE-2024-8190 currently ranks highest (80/100): Ivanti Cloud Services Appliance OS Command Injection Vulnerability.

RSS feed for cloud services appliance · ← Back to latest CVEs