High severity7.2CISA KEVNVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026
CVE-2024-8190
CVE-2024-8190
Description
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.
Affected products
4cpe:2.3:a:ivanti:cloud_services_appliance:4.6:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:cloud_services_appliance:4.6:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:cloud_services_appliance:4.6:patch_518:*:*:*:*:*:*
<=4.6 Patch 518+ 1 more
- (no CPE)range: <=4.6 Patch 518
- (no CPE)range: 4.6 Patch 519
Patches
Vulnerability mechanics
References
3- forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
- www.cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliancenvdUS Government Resource
News mentions
0No linked articles in our index yet.