Ivanti Avalanche vulnerabilities
92 published CVEs name Ivanti Avalanche among the affected products.
- Published CVEs
- 92
- Last 12 months
- 0
- Critical
- 22
- Known exploited
- 0
Critical 22High 56Medium 14Low 0Not scored 0
CVEs per yearBy the year they were published
- 202343
- 202443
- 20256
Newest CVEs
- CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve…
Ivanti · Avalanche
High7.2 - CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In…
Ivanti · Avalanche
High7.2 - CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could…
Ivanti · Avalanche
Critical9.8 - CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes…
Ivanti · Avalanche
High7.3 - CVE-2024-13180
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete…
Ivanti · Avalanche
High7.5 - CVE-2024-13179
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.
Ivanti · Avalanche
High7.3 - CVE-2024-50331
An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory.
Ivanti · Avalanche
High7.5 - CVE-2024-50321
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5 - CVE-2024-50320
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5 - CVE-2024-50319
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
Ivanti · Avalanche
High7.5