Aller au contenu

Vulnérabilités de Ivanti Avalanche

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-46804 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 Élevée 19 déc. 2023
CVE-2023-46803 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 Élevée 19 déc. 2023
CVE-2023-46266 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 7.3 Élevée 19 déc. 2023
CVE-2023-46265 An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side… 6.5 Moyenne 19 déc. 2023
CVE-2023-46264 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could… 7.2 Élevée 19 déc. 2023
CVE-2023-46258 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46263 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could… 7.2 Élevée 19 déc. 2023
CVE-2023-46257 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46262 An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF)… 7.5 Élevée 19 déc. 2023
CVE-2023-46261 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46260 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 7.5 Élevée 19 déc. 2023
CVE-2023-46259 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46225 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46224 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46223 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46222 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46221 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2023-46220 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could… 9.8 Critique 19 déc. 2023
CVE-2021-22962 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a… 7.3 Élevée 19 déc. 2023
CVE-2023-41726 Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability 7.8 Élevée 3 nov. 2023
CVE-2023-41725 Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability 7.8 Élevée 3 nov. 2023
CVE-2022-43555 Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability 7.8 Élevée 3 nov. 2023
CVE-2022-43554 Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability 7.8 Élevée 3 nov. 2023
CVE-2023-32560 An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service… 8.8 Élevée 10 août 2023
CVE-2023-32561 A previously generated artifact by an administrator could be accessed by an attacker 7.1 Élevée 10 août 2023

Autres produits Ivanti