CVE-2021-44529 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA
Code injection in N/a Ivanti EPM
CVSS score
9.8
EPSS probability
%99.1
Risk score
19.4
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2021-44529 Ivanti EPM 云服务设备 (CSA) 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。
Makefile Go / Python
Ivanti Endpoint Manager 4.6 - Remote Code Execution (RCE)
Makefile Go / Python
Nuclei: Ivanti EPM Cloud Services Appliance Code Injection
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2023-35078 Actively exploited
Vulnerability in Ivanti Endpoint Manager Mobile
I
Workaround Public Exploits:8EPSS %100
10.0
CVE-2026-10520 Actively exploited
OS command injection in Ivanti Sentry
I
Patch verified Public Exploits:1EPSS %100
10.0
CVE-2015-3306 Actively exploited
Improper access control in N/a
N
Workaround Public Exploits:5EPSS %99
9.8
CVE-2021-21985 Actively exploited
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
N
Workaround Public Exploits:10EPSS %100
9.8
CVE-2019-19781 Actively exploited
Vulnerability in N/a
N
Workaround Public Exploits:13EPSS %100
9.8
CVE-2021-21972 Actively exploited
Vulnerability in N/a VMware vCenter Server
N
Workaround Public Exploits:11EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-44529"