CVEブラウザに戻る

CVE-2024-8963

🔥 Known Exploited (CISA KEV)CRITICAL

9.4

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-09-19

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

Affected Platforms (CPE)

📦

Ivanti

Endpoint Manager Cloud Services Appliance

= 4.6

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8963

関連する脆弱性情報

CVE-2026-148566.3

A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, ca...

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-400001.8

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files...

CVE-2026-175345.5

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist i...