Skip to content

Vulnerabilities of Ivanti Avalanche

Is your version affected?

CVE Summary Score Published
CVE-2024-22061 A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote… 8.1 High Apr 19, 2024
CVE-2024-23529 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain… 5.3 Medium Apr 19, 2024
CVE-2024-23528 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain… 5.3 Medium Apr 19, 2024
CVE-2024-25000 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-29204 A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote… 9.8 Critical Apr 19, 2024
CVE-2024-27978 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an… 6.5 Medium Apr 19, 2024
CVE-2024-27977 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 7.1 High Apr 19, 2024
CVE-2024-27976 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-27975 An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote… 8.8 High Apr 19, 2024
CVE-2024-27984 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 7.1 High Apr 19, 2024
CVE-2024-24997 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-24996 A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an… 9.8 Critical Apr 19, 2024
CVE-2024-24995 A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote… 8.8 High Apr 19, 2024
CVE-2024-24994 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-24993 A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote… 8.8 High Apr 19, 2024
CVE-2024-24992 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-24991 A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an… 6.5 Medium Apr 19, 2024
CVE-2024-24999 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-24998 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-23535 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated… 8.8 High Apr 19, 2024
CVE-2024-23534 An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote… 8.8 High Apr 19, 2024
CVE-2024-23533 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain… 4.3 Medium Apr 19, 2024
CVE-2024-23532 An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an… 7.5 High Apr 19, 2024
CVE-2024-23531 An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an… 7.5 High Apr 19, 2024
CVE-2024-23530 An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain… 5.3 Medium Apr 19, 2024

Other Ivanti products