[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPVRW-a36DulM5RH24hSX1SFgk1fsBjZcL5eYzyoIoLs":3,"g5a-risk:CVE-2024-9379":126},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":60,"weaknesses":61,"weaknessesCount":48,"isActivelyExploited":4,"cisaInfo":70,"otxData":29,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":107,"notableEvents":108},"CVE-2024-9379","What is CVE-2024-9379?","SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.","SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL s...","2024-10-08T17:15:56.727","2025-10-24T13:55:12.407",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",6.5,"MEDIUM",null,1.2,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],0.43583,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ivanti","endpoint_manager_cloud_services_appliance","*","cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance:*:*:*:*:*:*:*:*",1,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FSecurity-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381","Ivanti",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9379","CISA",[59],"US Government Resource",2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",{"shortDescription":66,"requiredAction":66,"vulnerabilityName":66,"dateAdded":29},[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2024-9379? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-9379, a high severity cyber security vulnerability from 2024. High exploit probability (43.6%). SQL injection in the admin...","CVE-2024-9379, CVE-2024-9379 vulnerability, CVE-2024-9379 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ivanti security, endpoint_manager_cloud_services_appliance vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-9379",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-9379","Cybersecurity","CVE-2024-9379, CVE-2024-9379 vulnerability, CVE-2024-9379 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":29,"Negate":29,"Nodes":99},[100],{"Operator":101,"Negate":102,"CPEMatch":103},"OR",false,[104],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":105,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":106,"VersionEndIncluding":29},"B633ABF6-4CAD-462D-B6C9-F209D90EAFD9","5.0.2",[],[109,116],{"id":110,"eventType":111,"eventTime":112,"details":113,"label":114,"color":115},"ffbcdd1c-3cbd-4003-a737-49bd4436d07e","HIGH_EPSS_DELTA","2025-06-11T10:09:47.202847+00:00","Daily EPSS score increased by 0.151 on 2024-10-10","EPSS Score Increased","red",{"id":117,"eventType":118,"eventTime":119,"details":120,"label":121,"color":122},"1d7657e0-6a3d-4070-93f1-4dc2f4ead14a","LOW_EPSS_DELTA","2025-11-19T04:04:11.740026+00:00","Daily EPSS score decreased by 0.291 on 2024-10-10","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":124,"version":125},1793218102553,"2.0",{"score":127,"band":41,"action":128,"scoredAt":129},73,"Emergency patch","2026-07-01T10:34:10.787511+00:00"]