{"id":"CVE-2024-45504","aliases":["EUVD-2024-41513","GHSA-v6vm-xfhq-54qp"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and...","description":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00318,"percentile":0.25096,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2024-09-10T04:35:19Z","modified":"2026-06-17T07:54:19Z","products":[{"vendor":"alps system integration co., ltd.","product":"intersafe cats"},{"vendor":"alps system integration co., ltd.","product":"intersafe gatewayconnection"},{"vendor":"alps system integration co., ltd.","product":"intersafe logdirector"},{"vendor":"alps system integration co., ltd.","product":"intersafe lognavigator"},{"vendor":"alps system integration co., ltd.","product":"intersafe mobilesecurity"},{"vendor":"alps system integration co., ltd.","product":"intersafe webfilter"},{"vendor":"axseed,inc.","product":"sppm bizbrowser"},{"vendor":"axseed,inc.","product":"sppm secure filtering"},{"vendor":"hammock corporation","product":"assetview f"},{"vendor":"jma systems corporation","product":"kaito securebrowser"},{"vendor":"miroku jyoho service co., ltd.","product":"mjs webfiltering"},{"vendor":"motex inc.","product":"lanscope endpointmanager webfiltering"},{"vendor":"qualitysoft corporation","product":"url filtering"},{"vendor":"trend micro incorporated","product":"interscan webmanager"}],"references":[{"url":"https://alsifaq.dga.jp/faq_detail.html?id=6494"},{"url":"https://success.trendmicro.com/ja-JP/solution/KA-0017618"},{"url":"https://www.motex.co.jp/news/notice/2024/release240909/"},{"url":"https://jvn.jp/en/jp/JVN05579230/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45504"},{"url":"https://jvn.jp/en/jp/JVN05579230"},{"url":"https://www.motex.co.jp/news/notice/2024/release240909"},{"url":"https://github.com/advisories/GHSA-v6vm-xfhq-54qp"}],"sources":{"cve":[{"id":"CVE-2024-45504","description":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.","status":"published","published":"2024-09-10T04:35:19.457Z","modified":"2024-11-04T20:53:34.282Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:07.831255Z"}],"euvd":[{"id":"EUVD-2024-41513","description":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.","status":"published","published":"2024-09-10T04:35:19Z","modified":"2024-11-04T20:53:34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:11.298723Z"}],"ghsa":[{"id":"GHSA-v6vm-xfhq-54qp","title":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and...","description":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.","status":"published","published":"2024-09-10T06:30:49Z","modified":"2024-11-05T00:32:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:58:43.210342Z"}],"nvd":[{"id":"CVE-2024-45504","description":"Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.","status":"published","published":"2024-09-10T05:15:12.78Z","modified":"2026-06-17T07:54:19.993Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:25.561537Z"}]}}