Product:

Avalanche

(Ivanti)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 114
Date Id Summary Products Score Patch Annotated
2023-12-19 CVE-2023-46263 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution. Avalanche 9.8
2023-12-19 CVE-2023-46265 An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF). Avalanche 9.8
2023-12-19 CVE-2023-46266 An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Avalanche 9.1
2023-12-19 CVE-2023-46803 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS). Avalanche 7.5
2023-12-19 CVE-2023-46804 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS). Avalanche 7.5
2024-11-12 CVE-2024-50321 An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. Avalanche 7.5
2024-11-12 CVE-2024-50317 A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. Avalanche 7.5
2024-11-12 CVE-2024-50318 A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. Avalanche 7.5
2024-11-12 CVE-2024-50319 An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. Avalanche 7.5
2024-11-12 CVE-2024-50320 An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. Avalanche 7.5