A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/Security-Advisory-Avalanche-CVE-2023-38036 | Vendor Advisory |
Configurations
History
17 Jul 2025, 13:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:* | |
| References | () https://forums.ivanti.com/s/article/Security-Advisory-Avalanche-CVE-2023-38036 - Vendor Advisory | |
| First Time |
Ivanti avalanche
Ivanti |
12 Jul 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-12 04:15
Updated : 2025-07-17 13:45
NVD link : CVE-2023-38036
Mitre link : CVE-2023-38036
JSON object : View
Products Affected
ivanti
- avalanche
CWE
No CWE.