Known vulnerabilities in Avalanche

Vendor: Ivanti
Software: Avalanche
Software CPE: cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 87
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Avalanche Avalanche is affected by 87 known vulnerabilities: 1 critical, 25 high, 50 medium, 11 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113831 - Unrestricted Upload of File with Dangerous Type
CVE-2025-8297		 CWE-434 Low
No
No
 6.4.8 12.08.2025 SB2025081242
#VU113830 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-8296		 CWE-89 Low
No
No
 6.4.8 12.08.2025 SB2025081242
#VU102833 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-13179		 CWE-22 High
No
No
 6.4.7 15.01.2025 SB2025011593
#VU102832 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-13180		 CWE-22 Medium
No
No
 6.4.7 15.01.2025 SB2025011593
#VU102831 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-13181		 CWE-22 High
No
No
 6.4.7 15.01.2025 SB2025011593
#VU100563 - Out-of-bounds read
CVE-2024-50331		 CWE-125 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU100562 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-50321		 CWE-835 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU100561 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-50320		 CWE-835 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU100560 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-50319		 CWE-835 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU100559 - NULL Pointer Dereference
CVE-2024-50318		 CWE-476 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU100558 - NULL Pointer Dereference
CVE-2024-50317		 CWE-476 Medium
No
No
 6.4.6 15.11.2024 SB20241115103
#VU98411 - NULL Pointer Dereference
CVE-2024-47007		 CWE-476 Medium
No
No
 6.4.5 11.10.2024 SB2024101137
#VU98408 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-47009		 CWE-22 Medium
No
No
 6.4.5 11.10.2024 SB2024101137
#VU98400 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-47010		 CWE-22 Medium
No
No
 6.4.5 11.10.2024 SB2024101137
#VU98399 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-47011		 CWE-22 Medium
No
No
 6.4.5 11.10.2024 SB2024101137
#VU98398 - Server-Side Request Forgery (SSRF)
CVE-2024-47008		 CWE-918 Medium
No
No
 6.4.5 11.10.2024 SB2024101137
#VU95991 - Improper input validation
CVE-2024-37373		 CWE-20 Low
No
No
 6.4.4 14.08.2024 SB2024081432
#VU95990 - NULL Pointer Dereference
CVE-2024-37399		 CWE-476 Medium
No
No
 6.4.4 14.08.2024 SB2024081432
#VU95989 - Off-by-one Error
CVE-2024-36136		 CWE-193 Medium
No
No
 6.4.4 14.08.2024 SB2024081432
#VU95988 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-38653		 CWE-611 High
Available
No
 6.4.4 14.08.2024 SB2024081432


Showing elements 1 - 20 out of 87