CVE-2024-8963 CISA KEV · Actively exploited
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVSS score
—
EPSS probability
%98.6
Risk score
—
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Ivanti Cloud Services Appliance - Path Traversal
Makefile Go / Python
Combining CVE-2024-8963 & CVE-2024-8190 - For Unauthenticated RCE on Ivanti CSA 4.6 and below
Makefile Go / Python
GitHub
Ivanti Cloud Services Appliance - Path Traversal
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2023-35078 Actively exploited
Vulnerability in Ivanti Endpoint Manager Mobile
I
Workaround Public Exploits:8EPSS %100
10.0
CVE-2026-10520 Actively exploited
OS command injection in Ivanti Sentry
I
Patch verified Public Exploits:1EPSS %100
9.8
CVE-2021-44529 Actively exploited
Code injection in N/a Ivanti EPM
N
Patch verified Public Exploits:4EPSS %99
9.8
CVE-2026-1281 Actively exploited
Code injection in Ivanti Endpoint Manager Mobile
I
Workaround Public Exploits:1EPSS %99
9.1
CVE-2024-21887 Actively exploited
Vulnerability in Ivanti ICS
I
Patch status unknown Public Exploits:6EPSS %100
9.0
CVE-2025-22457 Actively exploited
Vulnerability in Ivanti Connect Secure
I
Patch status unknown Public Exploits:5EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-8963"