CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-10-08
Ivanti CSA (Cloud Services Appliance) Admin Web Console SQL Injection Vulnerability (CVE-2024-9379) Analysis and Mitigation Guide
[Affected Scope] Ivanti CSA (Cloud Services Appliance) versions prior to 5.0.2
[Impact] A remote authenticated attacker with administrative privileges can execute arbitrary SQL statements, potentially leading to sensitive data exposure and further system compromise.
[Mitigation] Immediately upgrade Ivanti CSA to version 5.0.2 or higher, and restrict external access to the admin console.