7.2
High
CVE-2024-29848 An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated,…
Description
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avalanche | 6.4.3 | No fix stated |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Avalanche
The 93 CVEs of Avalanche →
CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
7.2
High
CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
7.2
High
CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
9.8
Critical
CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
7.3
High