Security Resilience

CVE-2023-32566

Ivanti Avalanche ≤ 6.4.1

Published
10 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 9.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score 0.024 83th percentile
Risk Priority 71 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-32566 is a critical-severity an unspecified weakness vulnerability in Ivanti Avalanche. Its CVSS base score is 9.1 (Critical).

Operationally, ranked in the top 17% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-32561Same product: Ivanti Avalanche
CVE-2024-24999Same product: Ivanti Avalanche
CVE-2023-32560Same product: Ivanti Avalanche
CVE-2023-28127Same product: Ivanti Avalanche
CVE-2021-42130Same product: Ivanti Avalanche
CVE-2024-23532Same product: Ivanti Avalanche
CVE-2024-22061Same product: Ivanti Avalanche
CVE-2023-32565Same product: Ivanti Avalanche
CVE-2024-25000Same product: Ivanti Avalanche
CVE-2022-36981Same product: Ivanti Avalanche

Affected Assets

ivanti
avalanche
≤ 6.4.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References