← Database

CVE-2021-44529

CRITICAL CVSS: 9.8 Published: 2021-12-08 Modified: 2026-08-04

Description

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

Affected Platforms

Ivanti Endpoint Manager Cloud Services Appliance

Weakness Type

CWE-94, CWE-94

References