High severity7.5NVD Advisory· Published Dec 19, 2023· Updated Jun 17, 2026

CVE-2023-46262

Description

An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ivanti/Avalanche2 versions
cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: <=6.4.1
- (no CPE)range: 6.4.1
Ivanti/Avalanche Remote Control serverllm-create

Patches

Vulnerability mechanics

References

download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txtnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.066
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000