Skip to contentIvanti Avalanche vulnerabilities
- ivanti avalancheIncomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a...CVE-2025-82977.2 High
- ivanti avalancheSQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated...CVE-2025-82967.2 High
- ivanti avalancheA security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an...CVE-2023-380369.8 Critical
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13181EPSS 33.2%7.3 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13180EPSS 27.2%7.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13179EPSS 63.8%7.3 High
- ivanti avalancheAn out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote...CVE-2024-503317.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-503217.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-50320EPSS 39.6%7.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-503197.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...CVE-2024-503187.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...CVE-2024-503177.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-47011EPSS 56.3%7.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-47010EPSS 37.8%7.3 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-470097.3 High
- ivanti avalancheServer-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote...CVE-2024-47008EPSS 47.1%7.5 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5...CVE-2024-470077.5 High
- ivanti avalancheXXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to...CVE-2024-38653EPSS 92.0%8.2 High
- ivanti avalanchePath traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-386528.2 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-37399EPSS 27.8%7.5 High
- ivanti avalancheImproper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-373737.2 High
- ivanti avalancheAn off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-361367.5 High
- ivanti avalancheAn unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x...CVE-2024-29848EPSS 64.4%7.2 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235275.3 Medium
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235265.3 Medium
- ivanti avalancheA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...CVE-2024-220618.1 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235295.3 Medium
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235285.3 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-250008.8 High
- ivanti avalancheA Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...CVE-2024-292049.8 Critical
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-279847.1 High
- ivanti avalancheA Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche...CVE-2024-279786.5 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-279777.1 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-279768.8 High
- ivanti avalancheAn Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...CVE-2024-279758.8 High
- ivanti avalanche, avlanche +1 moreA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-249998.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-249988.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-249978.8 High
- ivanti avalancheA Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...CVE-2024-24996EPSS 32.2%9.8 Critical
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...CVE-2024-249958.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-24994EPSS 68.1%8.8 High
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...CVE-2024-249938.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.CVE-2024-24992EPSS 70.9%8.8 High
- ivanti avalancheA Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche...CVE-2024-249916.5 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-23535EPSS 68.1%8.8 High
- ivanti avalancheAn Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3...CVE-2024-235348.8 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235334.3 Medium
- ivanti avalancheAn out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235327.5 High
- ivanti avalancheAn Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...CVE-2024-235317.5 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235305.3 Medium
- Show olderLoading…