7.5
Élevée
CVE-2023-46262 An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF)…
Description
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Avalanche | 6.4.1 | Pas de correctif indiqué |
Références
- download.wavelink.com download.wavelink.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Avalanche
Les 93 CVE de Avalanche →
CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
7.2
Élevée
CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
7.2
Élevée
CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
9.8
Critique
CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
7.3
Élevée