| CVE-2025-8297 |
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
|
7.2
High
|
Aug 12, 2025 |
| CVE-2025-8296 |
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
|
7.2
High
|
Aug 12, 2025 |
| CVE-2023-38036 |
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
|
9.8
Critical
|
Jul 12, 2025 |
| CVE-2024-13181 |
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
|
7.3
High
|
Jan 14, 2025 |
| CVE-2024-13180 |
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13179 |
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
|
7.3
High
|
Jan 14, 2025 |
| CVE-2024-50331 |
An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak…
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-50321 |
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-50320 |
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-50319 |
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-50318 |
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial…
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-50317 |
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial…
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-47011 |
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive…
|
7.5
High
|
Oct 8, 2024 |
| CVE-2024-47010 |
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass…
|
7.3
High
|
Oct 8, 2024 |
| CVE-2024-47009 |
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass…
|
7.3
High
|
Oct 8, 2024 |
| CVE-2024-47008 |
Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak…
|
7.5
High
|
Oct 8, 2024 |
| CVE-2024-47007 |
A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote…
|
7.5
High
|
Oct 8, 2024 |
| CVE-2024-38653 |
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on…
|
8.2
High
|
Aug 14, 2024 |
| CVE-2024-38652 |
Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to…
|
8.2
High
|
Aug 14, 2024 |
| CVE-2024-37399 |
A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to…
|
7.5
High
|
Aug 14, 2024 |
| CVE-2024-37373 |
Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with…
|
7.2
High
|
Aug 14, 2024 |
| CVE-2024-36136 |
An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the…
|
7.5
High
|
Aug 14, 2024 |
| CVE-2024-29848 |
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated,…
|
7.2
High
|
May 31, 2024 |
| CVE-2024-23527 |
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain…
|
5.3
Medium
|
Apr 24, 2024 |
| CVE-2024-23526 |
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain…
|
5.3
Medium
|
Apr 19, 2024 |