Cloud Services Application vulnerabilities

4 known vulnerabilities in Cloud Services Application from Ivanti. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Cloud Services Application: Missing Authentication for Critical Functionality

  CVE-2026-121683Nov 10, 2026Ivanti

  Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

• 7.2 High severity

  Cloud Services Application: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-47908Feb 11, 2025IvantiEPSS 22.3%

  OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 7.2 High severity

  Cloud Services Application: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-11773Dec 10, 2024IvantiEPSS 23.3%

  SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

• 7.2 High severity

  Cloud Services Application: Improper Neutralization of Special Elements used in a Command

  CVE-2024-11772Dec 10, 2024IvantiEPSS 7.65%

  Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.