[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPVRW-a36DulM5RH24hSX1SFgk1fsBjZcL5eYzyoIoLs":3,"g5a-risk:CVE-2024-9379":128},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":62,"weaknesses":63,"weaknessesCount":50,"isActivelyExploited":4,"cisaInfo":72,"otxData":29,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":109,"notableEvents":110},"CVE-2024-9379","What is CVE-2024-9379?","SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.","SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL s...","2024-10-08T17:15:56.727","2026-10-01T19:17:15.58",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",6.5,"MEDIUM",null,1.2,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],[],0.44268,[42,42,42,42,40,40,40],0.43782,"High",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"ivanti","endpoint_manager_cloud_services_appliance","*","cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance:*:*:*:*:*:*:*:*",1,[52,57],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FSecurity-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381","Ivanti",[56],"Vendor Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9379","CISA",[61],"US Government Resource",2,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",{"shortDescription":68,"requiredAction":68,"vulnerabilityName":68,"dateAdded":29},[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2024-9379? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-9379, a high severity cyber security vulnerability from 2024. High exploit probability (44.3%). SQL injection in the admin...","CVE-2024-9379, CVE-2024-9379 vulnerability, CVE-2024-9379 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ivanti security, endpoint_manager_cloud_services_appliance vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-9379",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-9379","Cybersecurity","CVE-2024-9379, CVE-2024-9379 vulnerability, CVE-2024-9379 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":29,"Negate":29,"Nodes":101},[102],{"Operator":103,"Negate":104,"CPEMatch":105},"OR",false,[106],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":107,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":108,"VersionEndIncluding":29},"B633ABF6-4CAD-462D-B6C9-F209D90EAFD9","5.0.2",[],[111,118],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"ffbcdd1c-3cbd-4003-a737-49bd4436d07e","HIGH_EPSS_DELTA","2025-06-11T10:09:47.202847+00:00","Daily EPSS score increased by 0.151 on 2024-10-10","EPSS Score Increased","red",{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"1d7657e0-6a3d-4070-93f1-4dc2f4ead14a","LOW_EPSS_DELTA","2025-11-19T04:04:11.740026+00:00","Daily EPSS score decreased by 0.291 on 2024-10-10","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":126,"version":127},1793227185412,"2.0",{"score":129,"band":43,"action":130,"scoredAt":131},73,"Emergency patch","2026-10-28T07:04:08.072883+00:00"]