CVE-2024-50331: Ivanti Avalanche

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory.

Affected products

• Ivanti Avalanche: before 6.4.6 (fixed in 6.4.6)

Published 2024-11-12. Last modified 2026-06-17.