CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
- CVSS
- not scored
On CISA’s exploited list
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
- Added
- 2024-03-25
- Federal patch deadline
- 2024-04-15
- Ransomware use
- known