Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
403,621CVE records
2,771Published, last 7 days
1,739In CISA KEV
1,503Critical, last 30 days
5,599Analysed
16:54 UTCLast NVD sync
Filters Show:
117 results. Ivanti Avalanche.
Page 1 of 6| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-8297 | High | 7.2 |  Ivanti Avalanche | Unrestricted file upload | - | - | 1.3% | Aug 12, 2025 |
| CVE-2025-8296 | High | 7.2 | Ivanti Avalanche | SQL injection | - | - | 1.1% | Aug 12, 2025 |
| CVE-2023-38036 | Critical | 9.8 | Ivanti Avalanche | Classic buffer overflow | - | - | 3.0% | Jul 12, 2025 |
| CVE-2024-13181 | Critical | 9.8 | Ivanti Avalanche | Path traversal | - | - | 32% | Jan 14, 2025 |
| CVE-2024-13180 | High | 7.5 | Ivanti Avalanche | Path traversal | - | - | 28% | Jan 14, 2025 |
| CVE-2024-13179 | Critical | 9.8 | Ivanti Avalanche | Path traversal | - | - | 63% | Jan 14, 2025 |
| CVE-2024-50331 | High | 7.5 | Ivanti Avalanche | Out-of-bounds read | - | - | 1.1% | Nov 12, 2024 |
| CVE-2024-50321 | High | 7.5 | Ivanti Avalanche | CWE-835 | - | - | 1.2% | Nov 12, 2024 |
| CVE-2024-50320 | High | 7.5 | Ivanti Avalanche | CWE-835 | - | - | 40% | Nov 12, 2024 |
| CVE-2024-50319 | High | 7.5 | Ivanti Avalanche | CWE-835 | - | - | 1.2% | Nov 12, 2024 |
| CVE-2024-50318 | High | 7.5 | Ivanti Avalanche | NULL pointer dereference | - | - | 1.2% | Nov 12, 2024 |
| CVE-2024-50317 | High | 7.5 | Ivanti Avalanche | NULL pointer dereference | - | - | 1.2% | Nov 12, 2024 |
| CVE-2024-47011 | High | 7.5 | Ivanti Avalanche | Path traversal | - | - | 56% | Oct 8, 2024 |
| CVE-2024-47010 | Critical | 9.8 | Ivanti Avalanche | Path traversal | - | - | 38% | Oct 8, 2024 |
| CVE-2024-47009 | Critical | 9.8 | Ivanti Avalanche | Path traversal | - | - | 1.7% | Oct 8, 2024 |
| CVE-2024-47008 | High | 7.5 | Ivanti Avalanche | Server-side request forgery (SSRF) | - | - | 47% | Oct 8, 2024 |
| CVE-2024-47007 | High | 7.5 | Ivanti Avalanche | NULL pointer dereference | - | - | 1.7% | Oct 8, 2024 |
| CVE-2024-38653 | High | 7.5 | Ivanti Avalanche | XML external entity (XXE) | - | - | 92% | Aug 14, 2024 |
| CVE-2024-38652 | Critical | 9.1 | Ivanti Avalanche | Path traversal | - | - | 7.6% | Aug 14, 2024 |
| CVE-2024-37399 | High | 7.5 | Ivanti Avalanche | NULL pointer dereference | - | - | 28% | Aug 14, 2024 |
