CVE-2024-9379
high CISA KEVIvanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
Vendor / product: Ivanti — Cloud Services Appliance (CSA)
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
CVSS
7.2
7.2 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-10-08 17:15
Modified: 2026-10-01 19:17
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2024-10-09 · due 2024-10-30
Known ransomware use: Unknown
Required action (CISA)
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Affected products
ivanti / endpoint_manager_cloud_services_appliance <5.0.2
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
References
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-... 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9379 134c704f-9b21-4f2e-91b3-4a467353bcc0
Data sources
CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗