CVE-2021-44529—Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

PUBLISHEDvulnerability record
2024-03-25 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2021-44529
Project:
Ivanti
Product:
Endpoint Manager Cloud Service Appliance (EPM CSA)
Date Added:
2024-03-25
Due Date:
2024-04-15
Last Updated:
June 21, 2025

Vulnerability Name

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Description

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

  • https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US
  • https://nvd.nist.gov/vuln/detail/CVE-2021-44529

Related Weaknesses

browse all CVEs