CVE-2023-32567: Ivanti Avalanche

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236

Affected products

• Ivanti Avalanche: before 6.4.1 (fixed in 6.4.1)

Published 2023-08-10. Last modified 2026-06-17.