漏洞描述
Ivanti CSA 需授权 命令注入漏洞
Ivanti CSA 需授权 命令注入漏洞
PoC代码
暂无相关漏洞推荐
- Ivanti Pulse Connect Secure VPN /dana-na/auth/saml-sso.cgi XML 外部实体注入漏洞（CVE-2024-22024）
- POC CVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
- POC CVE-2021-30497: Ivanti Avalanche 6.3.2 - Local File Inclusion
- POC CVE-2021-44529: Ivanti EPM Cloud Services Appliance Code Injection
- POC CVE-2023-32563: Ivanti Avalanche - Remote Code Execution
- POC CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
- POC CVE-2023-38035: Ivanti Sentry - Authentication Bypass
- POC CVE-2023-46805: Ivanti ICS - Authentication Bypass
- POC CVE-2024-13159: Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive
- POC CVE-2024-13160: Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard
- POC CVE-2024-13161: Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile
- POC CVE-2024-21887: Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection
- POC CVE-2024-21893: Ivanti SAML - Server Side Request Forgery (SSRF)