CVE-2024-47908

High · 7.2

CVSS

7.2

EPSS

22.3%

Published

Feb 11, 2025

CISA due date

—

The record

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed