CVE-2024-45504

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-10 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.

Affected products

Alps System Integration Co., Ltd. InterSafe CATS: versions before 2024 July 4 maintenance
Alps System Integration Co., Ltd. InterSafe GatewayConnection: versions before 2024 July 20 maintenance
Alps System Integration Co., Ltd. InterSafe LogDirector: versions before the replacement file released on 2024 September 9
Alps System Integration Co., Ltd. InterSafe LogNavigator: before Ver.1.1.1
Alps System Integration Co., Ltd. InterSafe MobileSecurity: versions before 2024 August 31 maintenance
Alps System Integration Co., Ltd. InterSafe WebFilter: before V9.1SP4 Build1653
AXSEED,Inc. SPPM BizBrowser: versions before 2024 June 18 maintenance
AXSEED,Inc. SPPM Secure Filtering: versions before 2024 July 20 maintenance
Hammock Corporation AssetView F: versions before 2024 July 4 maintenance
JMA Systems Corporation KAITO SecureBrowser: versions before 2024 July 4 maintenance
MIROKU JYOHO SERVICE CO., LTD. MJS WebFiltering: versions before 2024 July 4 maintenance
MOTEX Inc. LANSCOPE EndpointManager WebFiltering: versions before 2024 July 4 maintenance
QualitySoft Corporation URL Filtering: versions before 2024 July 4 maintenance
Trend Micro Incorporated InterScan WebManager: 9.0, 9.0 Service Pack 1, 9.1, 9.1 Service Pack 1, 9.1 Service Pack 2, 9.1 Service Pack 3 (+1)

References

Get alerted when CVE-2024-45504 or the next vulnerability affects your stack