Skip to content

Vulnerabilities of Ivanti Avalanche

Is your version affected?

CVE Summary Score Published
CVE-2023-38036 A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to… 9.8 Critical Jul 12, 2025
CVE-2024-29204 A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote… 9.8 Critical Apr 19, 2024
CVE-2024-24996 A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an… 9.8 Critical Apr 19, 2024
CVE-2023-46258 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46257 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46261 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46259 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46225 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46224 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46223 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46222 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46221 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2023-46220 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critical Dec 19, 2023
CVE-2022-36975 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36974 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36973 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36972 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023
CVE-2022-36980 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.4 Critical Mar 29, 2023
CVE-2022-36971 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36978 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36977 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche… 9.8 Critical Mar 29, 2023
CVE-2022-36976 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche… 9.1 Critical Mar 29, 2023

Other Ivanti products