Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 09/10/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager cloud services appliance | < 5.0.2 | 5.0.2 |
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free