Vulnerabilities (CVE)

Filtered by vendor Ivanti Subscribe
Filtered by product Avalanche
Total 102 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-37373 1 Ivanti 1 Avalanche 2024-08-15 N/A 7.2 HIGH
Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.
CVE-2024-36136 1 Ivanti 1 Avalanche 2024-08-15 N/A 7.5 HIGH
An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.