CVE-2024-8190

🔥 Known Exploited (CISA KEV)HIGH

7.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-09-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.

Affected Platforms (CPE)

📦

Ivanti

Cloud Services Appliance

= 4.6

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190

🔗 https://www.cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliance

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8190

Vulnerability Description

Affected Platforms (CPE)

Cloud Services Appliance

References & Advisories

相关漏洞威胁