CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

Vulnerability details

Affected productsEndpoint Manager Cloud Service Appliance (EPM CSA)
KEV remediation due2024-04-15