CVE-2023-41725: Ivanti Avalanche

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability

Affected products

• Ivanti Avalanche: before 6.4.1.236 (fixed in 6.4.1.236)

Published 2023-11-03. Last modified 2026-06-17.