7.2
High
CVE-2023-46264 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could…
Description
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avalanche | 6.4.1 | No fix stated |
References
- download.wavelink.com download.wavelink.com
Timeline
- Published
- Last modified
Other CVEs of Avalanche
The 93 CVEs of Avalanche →
CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
7.2
High
CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
7.2
High
CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
9.8
Critical
CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
7.3
High