PatchTheCVE: cloud services appliancehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-22460: Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated atthttps://patchthecve.com/cve/CVE-2025-22460.htmlhttps://patchthecve.com/cve/CVE-2025-22460.htmlWed, 17 Jun 2026 08:47:31 +0000HIGH 7.8: Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.CVE-2024-47908: OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticatedhttps://patchthecve.com/cve/CVE-2024-47908.htmlhttps://patchthecve.com/cve/CVE-2024-47908.htmlWed, 17 Jun 2026 07:57:57 +0000CRITICAL 9.1: OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-11771: Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restrictehttps://patchthecve.com/cve/CVE-2024-11771.htmlhttps://patchthecve.com/cve/CVE-2024-11771.htmlWed, 17 Jun 2026 06:58:25 +0000MEDIUM 5.3: Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.CVE-2024-11773: SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attackhttps://patchthecve.com/cve/CVE-2024-11773.htmlhttps://patchthecve.com/cve/CVE-2024-11773.htmlWed, 17 Jun 2026 06:58:25 +0000CRITICAL 9.1: SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.CVE-2024-11772: Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated athttps://patchthecve.com/cve/CVE-2024-11772.htmlhttps://patchthecve.com/cve/CVE-2024-11772.htmlWed, 17 Jun 2026 06:58:25 +0000CRITICAL 9.1: Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-11639: An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated ahttps://patchthecve.com/cve/CVE-2024-11639.htmlhttps://patchthecve.com/cve/CVE-2024-11639.htmlWed, 17 Jun 2026 06:58:07 +0000CRITICAL 10.0: An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative accessCVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerabilityhttps://patchthecve.com/cve/CVE-2024-8190.htmlhttps://patchthecve.com/cve/CVE-2024-8190.htmlWed, 17 Jun 2026 08:22:05 +0000HIGH 7.2: An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.