CVE-2024-11773

High · 7.2

CVSS

7.2

EPSS

23.5%

Published

Dec 10, 2024

CISA due date

—

The record

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

Affected packages

Ecosystem	Package	Introduced	Fixed