Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Vulnerabilities CVE-2024-9379

CVE-2024-9379

Medium
Open
KEV
TLP:CLEAR

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Ivanti — Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

Details

EPSS Score ⓘ
43.36%

98.6th percentile

Confidence
100%
CISA KEV
Date Added
Oct 9, 2024
Patch Due
Oct 30, 2024
Required Action
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.