CVE-2023-32565: Ivanti Avalanche

Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days.

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1.

Affected products

• Ivanti Avalanche: before 6.4.1 (fixed in 6.4.1)

Published 2023-08-10. Last modified 2026-06-17.