CVE-2021-44529CISA KEVEPSS p99.9%

CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA)

Description

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

Scoring

CVSS 9.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS99.11% probability of exploitation · percentile 99.9% · 2026-10-03T12:00:21Z
Last modified2026-08-04

CISA KEV entry

Added to KEV: 2024-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability kev-cve-2021-445290%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVE
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVE
CVE-2026-8111
CVE
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
CVE
CVE-2025-13659
CVE
Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.