CVE-2024-8963

Severity

CRITICAL

CVSS

9.4

EPSS

0.98607

Risk score

59.51

CISA KEV

Yes

PoC

Published

2024-09-19

Modified

2025-10-21

First seen

2026-08-07

Aliases

EUVD-2024-49510, GHSA-W7RX-CMPF-JRPP

Products

Ivanti:CSA (Cloud Services Appliance) patch: 4.6 Patch 519, Ivanti:CSA (Cloud Services Appliance) patch: 5.0, Ivanti:Cloud Services Appliance (CSA)

Sources

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.