Skip to contentIvanti Avalanche vulnerabilities
- ivanti avalancheDirectory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated...CVE-2023-41474Public exploitEPSS 37.6%6.5 Medium
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-468047.5 High
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-468037.5 High
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2023-462667.3 High
- ivanti avalancheAn unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or...CVE-2023-462656.5 Medium
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...CVE-2023-46264EPSS 90.2%7.2 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...CVE-2023-46263EPSS 81.9%7.2 High
- ivanti avalancheAn unauthenticated attacked could send a specifically crafted web request causing a Server-Side...CVE-2023-46262EPSS 82.8%7.5 High
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46261EPSS 11.3%9.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462607.5 High
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46259EPSS 11.3%9.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462589.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46257EPSS 11.3%9.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46225EPSS 11.3%9.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462249.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462239.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462229.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-462219.8 Critical
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46220EPSS 11.3%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46217EPSS 36.4%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46216EPSS 36.4%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-41727EPSS 36.4%9.8 Critical
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2021-22962EPSS 91.0%7.3 High
- ivanti avalancheIvanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation VulnerabilityCVE-2023-417267.8 High
- ivanti avalancheIvanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation...CVE-2023-417257.8 High
- ivanti avalancheIvanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation...CVE-2022-435557.8 High
- ivanti avalancheIvanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation...CVE-2022-435547.8 High
- ivanti avalancheAn attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could...CVE-2023-32560Public exploitEPSS 99.4%8.8 High
- ivanti avalancheA previously generated artifact by an administrator could be accessed by an attacker. The...CVE-2023-325617.1 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...CVE-2023-32562EPSS 45.6%6.8 Medium
- ivanti avalancheAn unauthenticated attacker could achieve the code execution through a RemoteControl server.CVE-2023-32563EPSS 89.1%8.8 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...CVE-2023-32564EPSS 44.4%6.8 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2023-325656.3 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2023-325666.3 Medium
- ivanti avalanche, wavelink +1 moreIvanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.CVE-2023-325676.5 Medium
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...CVE-2023-28128Public exploitEPSS 84.0%7.2 High
- ivanti avalancheA path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited...CVE-2023-28127EPSS 58.6%7.5 High
- ivanti avalancheAn authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could...CVE-2023-28126EPSS 66.7%5.9 Medium
- ivanti avalancheAn improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below...CVE-2023-281255.9 Medium
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369837.5 High
- ivanti avalancheThis vulnerability allows remote attackers to read arbitrary files on affected installations of...CVE-2022-36982EPSS 73.8%6.5 Medium
- ivanti avalancheThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-36981EPSS 83.4%8.8 High
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-36980EPSS 81.7%9.4 Critical
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369797.5 High
- ivanti avalancheThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-369789.8 Critical
- ivanti avalancheThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-369779.8 Critical
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369769.1 Critical
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369759.1 Critical
- ivanti avalancheThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-36974EPSS 84.5%9.8 Critical
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369739.1 Critical
- Show moreLoading…