CVE-2022-44574: Ivanti Avalanche

High severity, CVSS 7.5. EPSS: 62.4% chance of exploitation in the next 30 days.

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.

Affected products

• Ivanti Avalanche: before 6.4.0 (fixed in 6.4.0)

Published 2023-03-10. Last modified 2026-06-17.