Skip to content

Vulnerabilities of Ivanti Avalanche

Is your version affected?

CVE Summary Score Published
CVE-2023-32562 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could… 6.8 Medium Aug 10, 2023
CVE-2023-32563 An unauthenticated attacker could achieve the code execution through a RemoteControl server 8.8 High Aug 10, 2023
CVE-2023-32564 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could… 6.8 Medium Aug 10, 2023
CVE-2023-32565 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 6.3 Medium Aug 10, 2023
CVE-2023-32566 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 6.3 Medium Aug 10, 2023
CVE-2022-36975 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36983 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 7.5 High Mar 29, 2023
CVE-2022-36974 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36982 This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche… 6.5 Medium Mar 29, 2023
CVE-2022-36973 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36981 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 8.8 High Mar 29, 2023
CVE-2022-36972 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36980 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.4 Critical Mar 29, 2023
CVE-2022-36971 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36979 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 7.5 High Mar 29, 2023
CVE-2022-36978 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36977 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36976 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023

Other Ivanti products