Security Resilience

CVE-2023-46266

Ivanti Avalanche ≤ 6.4.1

Published
19 December 2023
Modified
21 November 2024
CVSS Score v3.1 9.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score 0.035 89th percentile
Risk Priority 72 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-46266 is a critical-severity an unspecified weakness vulnerability in Ivanti Avalanche. Its CVSS base score is 9.1 (Critical).

Operationally, ranked in the top 11% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-8297Same product: Ivanti Avalanche
CVE-2024-29848Same product: Ivanti Avalanche
CVE-2023-41726Same product: Ivanti Avalanche
CVE-2023-38036Same product: Ivanti Avalanche
CVE-2024-50319Same product: Ivanti Avalanche
CVE-2024-24996Same product: Ivanti Avalanche
CVE-2024-24998Same product: Ivanti Avalanche
CVE-2024-50331Same product: Ivanti Avalanche
CVE-2024-23526Same product: Ivanti Avalanche
CVE-2024-23531Same product: Ivanti Avalanche

Affected Assets

ivanti
avalanche
≤ 6.4.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References