Skip to content

Vulnerabilities of Ivanti Avalanche

Is your version affected?

CVE Summary Score Published
CVE-2023-46804 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 High Dec 19, 2023
CVE-2023-46803 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 High Dec 19, 2023
CVE-2023-46266 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 7.3 High Dec 19, 2023
CVE-2023-46265 An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side… 6.5 Medium Dec 19, 2023
CVE-2023-46264 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could… 7.2 High Dec 19, 2023
CVE-2023-46258 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46263 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could… 7.2 High Dec 19, 2023
CVE-2023-46257 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46262 An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF)… 7.5 High Dec 19, 2023
CVE-2023-46261 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46260 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 High Dec 19, 2023
CVE-2023-46259 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46225 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46224 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46223 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46222 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46221 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46220 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2021-22962 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 7.3 High Dec 19, 2023
CVE-2023-41726 Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability 7.8 High Nov 3, 2023
CVE-2023-41725 Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability 7.8 High Nov 3, 2023
CVE-2022-43555 Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability 7.8 High Nov 3, 2023
CVE-2022-43554 Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability 7.8 High Nov 3, 2023
CVE-2023-32560 An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service… 8.8 High Aug 10, 2023
CVE-2023-32561 A previously generated artifact by an administrator could be accessed by an attacker 7.1 High Aug 10, 2023

Other Ivanti products