Live › vulnerability › CVE-2024-9379
Go to dashboardIvanti Cloud Services Appliance (CSA) has a SQL injection flaw in its admin web console, present in versions before 5.0.2. An attacker logged in as an administrator can run arbitrary SQL statements against the appliance's database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Ivanti Cloud Services Appliance (CSA) | vendor | – | – |
| ivanti endpoint manager cloud services appliance | vendor | < 5.0.2 | 5.0.2 |
Unknown from the sources.
Upgrade CSA to 5.0.2 or later; CISA says CSA 4.6.x is end-of-life and should be removed from service or moved to the 5.0.x line.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.
CISA required action: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
This page as .md · .json · in your agent: get_signal("CVE-2024-9379")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.