CVE-2024-9379

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2024 · Catalog

   Detected

   Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

2. Oct 9, 2024 · CISA KEV

   Known exploited

   As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

3. Oct 30, 2024 · CISA KEV

   Remediation due

   As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

4. Oct 1, 2026 · Catalog

   Updated

   Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

Affected

• cpe ivanti/endpoint manager cloud services applianceversion unspecified
• vendor Ivanti Cloud Services Appliance (CSA)version unspecified

Sources

• CISA KEVCVE-2024-9379

  Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

  cisa.gov
• CVE.orgCVE-2024-9379

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2024-9379

  30-day exploitation probability 43.8%

  first.org
• NIST NVDCVE-2024-9379

  SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

  nvd.nist.gov

References

• CISA note · forums.ivanti.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov