Firetruck

CVE-2024-9379

KEV
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
CSA (Cloud Services Appliance)Ivanti / CSA (Cloud Services Appliance)5.0.2unaffected