CVE-2021-42128: Ivanti Avalanche

Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days.

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.

Affected products

• Ivanti Avalanche: before 6.3.3 (fixed in 6.3.3)

Published 2021-12-07. Last modified 2026-06-17.