← All advisories

Critical severity9.8NVD Advisory· Published Dec 19, 2023· Updated Jun 17, 2026

CVE-2023-46265

CVE-2023-46265

Description

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ivanti/Avalanche2 versions
cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: <=6.4.1
- (no CPE)range: 6.4.1
Avalanche/Smart Device Serverllm-create

Patches

Vulnerability mechanics

References

1

download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txtnvdRelease Notes

News mentions

0

No linked articles in our index yet.