{"cvss":9.8,"datePublished":"2024-03-25","dateUpdated":"2024-03-25","description":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).","dueDate":"2024-04-15","id":"CVE-2021-44529","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-44529","product":"Endpoint Manager Cloud Service Appliance (EPM CSA)","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","vendor":"Ivanti"}