{"cvss":6.5,"datePublished":"2024-10-08T00:00:00Z","dateUpdated":"2024-10-08T00:00:00Z","description":"Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.","dueDate":"2024-10-30T00:00:00Z","id":"CVE-2024-9379","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Cloud Services Appliance (CSA)","requiredAction":"As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.","severity":"MEDIUM","source":"vulncheck_kev","title":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","vendor":"Ivanti"}