Cyber Resilience

CVE-2023-32566

Ivanti Avalanche ≤ 6.4.1

Published
10 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 9.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score 0.024 82th percentile
Risk Priority 71 floored blend · peak EPSS

Summary

CVE-2023-32566 is a critical-severity an unspecified weakness vulnerability in Ivanti Avalanche. Its CVSS base score is 9.1 (Critical).

Operationally, ranked in the top 18% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-50321Same product: Ivanti Avalanche
CVE-2025-8297Same product: Ivanti Avalanche
CVE-2023-32561Same product: Ivanti Avalanche
CVE-2024-27978Same product: Ivanti Avalanche
CVE-2023-41726Same product: Ivanti Avalanche
CVE-2023-28126Same product: Ivanti Avalanche
CVE-2024-38652Same product: Ivanti Avalanche
CVE-2023-32565Same product: Ivanti Avalanche
CVE-2024-50317Same product: Ivanti Avalanche
CVE-2024-23531Same product: Ivanti Avalanche

Affected Assets

ivanti
avalanche
≤ 6.4.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References