Home / Items
VulnerabilityKnown exploitedExploit likelihood 44%
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
CVE-2024-9379 · CISA KEV · October 9, 2024
Summary
Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.
From CISA, quoted as published. Check the source before acting.
What to do
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
CISA required action, quoted.
Affected products
| Vendor | Product |
|---|---|
| Ivanti | Cloud Services Appliance (CSA) |
Why it's on these mode pages
- Maritime: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com