Ivanti Avalanche vulnerabilities
92 published CVEs name Ivanti Avalanche among the affected products.
- 92Published CVEs92 of them scored
- 0Last 12 monthspublished in the last year
- 22Critical56 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve…
Ivanti · Avalanche
High7.2 - CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In…
Ivanti · Avalanche
High7.2 - CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could…
Ivanti · Avalanche
Critical9.8 - CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes…
Ivanti · Avalanche
High7.3 - CVE-2024-13180
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete…
Ivanti · Avalanche
High7.5 - CVE-2024-13179
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.
Ivanti · Avalanche
High7.3 - CVE-2024-50331
An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory.
Ivanti · Avalanche
High7.5 - CVE-2024-50321
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5 - CVE-2024-50320
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5 - CVE-2024-50319
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5