IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.5Media KEV

CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Ivanti CSA (Cloud Services Appliance) Publicada: (hace 2 años)

Explotación conocida — Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CISA confirmó el 09.10.2024 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 30.10.2024.

Acción requerida: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9379

Descripción

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

Debilidad (CWE): CWE-89

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Ivanti CSA (Cloud Services Appliance) fixed 5.0.2
ivanti endpoint manager cloud services appliance < 5.0.2

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance:*:*:*:*:*:*:*:* < 5.0.2

CVE recientes del mismo producto — Ivanti (Connect Secure, EPMM…)

9.9Crítica
CVE-2026-109412
Ivanti Neurons Patch for Intune

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

7.7Alta
CVE-2026-106047
Ivanti Xtraction

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

7.5Alta
CVE-2026-106043
Ivanti Xtraction

A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.

9.9Crítica
CVE-2026-106042
Ivanti Xtraction

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmi…

5.5Media
CVE-2026-106035
Ivanti Xtraction

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.