Critical severity9.1NVD Advisory· Published Aug 10, 2023· Updated Jun 17, 2026

CVE-2023-32566

Description

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1.

Affected products

Ivanti/Avalanche3 versions
cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: <6.4.1
- (no CPE)range: >=6.4.1
- (no CPE)range: 6.4.xxx

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000