CVE-2024-9379
KEV Medium · CVSS 6.5- CVSS
- 6.5
- nvd
- EPSS
- —
- KEV
- Listed
- 2024-10-09
- Class
- other
- CWE-89, CWE-89
Description
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
References
Status: profiled · ingested 2026-10-02T00:00:02.000Z