8.8
High
CVE-2023-32560 An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service…
Description
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avalanche 6.4 | earliest → < 6.4.1 | 6.4.1 |
References
- forums.ivanti.com forums.ivanti.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of Avalanche
The 93 CVEs of Avalanche →
CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
7.2
High
CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
7.2
High
CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
9.8
Critical
CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
7.3
High