Vulnerabilities > Ivanti > Avalanche

DATE CVE VULNERABILITY TITLE RISK
2023-03-29 CVE-2022-36973 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
8.8
2023-03-29 CVE-2022-36974 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36975 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36976 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36977 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36978 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36979 Unspecified vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36980 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ivanti Avalanche 6.3.2.3490/6.3.3/6.3.3.101
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
network
high complexity
ivanti CWE-367
8.1
2023-03-29 CVE-2022-36981 Unspecified vulnerability in Ivanti Avalanche 6.3.3.101
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101.
network
low complexity
ivanti
critical
9.8
2023-03-29 CVE-2022-36982 Unspecified vulnerability in Ivanti Avalanche 6.3.3.101
This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101.
network
low complexity
ivanti
7.5