{"id":"CVE-2024-9379","vendor_project":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerability_name":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","date_added":"2024-10-09","due_date":"2024-10-30","known_ransomware_use":"Unknown","short_description":"Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.","required_action":"As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.","cwes":"CWE-89","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","nvd_published":"2024-10-08","nvd_status":"Analyzed","epss":0.43782,"epss_percentile":0.98688,"cvss_score":7.2,"days_published_to_kev":1,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2024-9379","by":"CyberMax"}