GCVE - cpe:2.3:a:n/a:ivanti_avalanche:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:ivanti_avalanche:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Ivanti Avalanche (`efc1f978-e9ce-5cde-83d7-9f3492ea62b9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-44574`	vulnerable	2026-06-08 05:49:35.660173	Details available An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port. Published: 2023-03-10T00:00:00.000Z Updated: 2025-02-28T17:07:14.895Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Avalanche-ZDI-CAN-19513-Security-Advisory?language=en_US	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42133`	vulnerable	2026-06-08 05:35:21.904372	Details available An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write. Published: 2021-12-07T13:13:35.000Z Updated: 2024-08-04T03:30:37.497Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42132`	vulnerable	2026-06-08 05:35:21.904092	Details available A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution. Published: 2021-12-07T13:13:29.000Z Updated: 2024-08-04T03:30:36.359Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42131`	vulnerable	2026-06-08 05:35:21.903804	Details available A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation. Published: 2021-12-07T13:13:24.000Z Updated: 2024-08-04T03:30:37.469Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42130`	vulnerable	2026-06-08 05:35:21.903434	Details available A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution. Published: 2021-12-07T13:13:19.000Z Updated: 2024-08-04T03:30:37.294Z Open on db.gcve.eu Reference links https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42129`	vulnerable	2026-06-08 05:35:21.903045	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42128`	vulnerable	2026-06-08 05:35:21.902625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42127`	vulnerable	2026-06-08 05:35:21.902272	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42126`	vulnerable	2026-06-08 05:35:21.901924	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42124`	vulnerable	2026-06-08 05:35:21.898879	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.