CVE-2024-9379

🗓️ 08 Oct 2024 16:23:13Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 237 Views

SQL injection in Ivanti CSA admin web console allows remote attacker to run arbitrary SQL statement

Reporter	Title	Published	Views	Family All 32
ATTACKERKB	CVE-2024-9380	8 Oct 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-9379	8 Oct 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Cloud Services Appliance’s networking component, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.	29 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web-based console of the network device Ivanti Cloud Services Appliance allows a hacker to execute arbitrary code.	29 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti Cloud Services Appliance’s network interface, related to incorrect path name restrictions for the restricted access catalog, allows attackers to escalate their privileges.	29 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-9379	8 Oct 202418:43	–	circl
CISA KEV Catalog	Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability	9 Oct 202400:00	–	cisa_kev
CISA	CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications	22 Jan 202512:00	–	cisa
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	9 Oct 202412:00	–	cisa
CNNVD	Ivanti CSA 安全漏洞	8 Oct 202400:00	–	cnnvd

NVD

Vulners

Vulnrichment

Node

ivanti endpoint_manager_cloud_services_applianceRange<5.0.2

[
  {
    "defaultStatus": "affected",
    "product": "CSA (Cloud Services Appliance)",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 08:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5 - 7.2

EPSS0.43583

SSVC