Ivanti CSA
Security incidents tagged Ivanti CSA. Newest first.
0 Ivanti CSA incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 743
- Longest quiet run: 741 days (Oct 12–Oct 22)
Show 1 older incident1 older incident
September 2024 1
CriticalIvanti Cloud Services Appliance zero-days chained by a suspected nation-state actorPatched
Ivanti Cloud Services Appliance / Cloud Services Appliance (CSA) Patched
Four Ivanti Cloud Services Appliance (CSA) bugs were exploited in 2024: a command injection (CVE-2024-8190), a path traversal admin bypass (CVE-2024-8963), and later a SQL injection and another command injection (CVE-2024-9379, CVE-2024-9380). FortiGuard Incident Response found a suspected nation-state actor chaining them. CSA 4.6 was end-of-life; Ivanti urged upgrading to CSA 5.0. Added to the CISA KEV catalog on 2024-09-13, 2024-09-19, 2024-10-09.
Open incident →CVE-2024-8190 · CVE-2024-8963 · CVE-2024-9379 +1
