Ivanti's CVE-2024-8190 vulnerability in Cloud Service Appliance 4.6, actively exploited, is in CISA's KEV Catalog; switch to v5.

Ivanti has disclosed a serious vulnerability, CVE-2024-8190, in its Cloud Service Appliance version 4.6, which is actively being exploited. This version, now at end-of-life, poses security risks as it no longer receives updates. The U.S. Cybersecurity and Infrastructure Agency (CISA) has added it to its Known Exploited Vulnerabilities Catalog, urging users to transition to the supported version 5.0 or apply the latest patch for version 4.6.