AV
Product
Avalanche
117
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 47High 63Medium 7Low 0
Watch
Add Avalanche to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27978 | 6.5 | Apr 19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service… Affected: before 6.4.3.528 |
| CVE-2024-24991 | 6.5 | Apr 19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service… Affected: before 6.4.3.528 |
| CVE-2024-23533 | 6.5 | Apr 19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an authenticated remote attacker to read… Affected: before 6.4.3.528 |
| CVE-2023-41474 | 6.5 | Jan 25 | Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component Affected: 6.3.4.153 |
| CVE-2018-8902 | 6.5 | Jun 29 | An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2 Affected: 5.3 through 6.2 |
| CVE-2023-28126 | 5.9 | May 9 | An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the… Affected: through 6.3.4.153 |
| CVE-2023-28125 | 5.9 | May 9 | An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive… Affected: through 6.3.4.153 |
Showing 7