← Database

CVE-2021-42127

CRITICAL CVSS: 9.8 Published: 2021-12-07 Modified: 2026-06-17

Description

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.

Affected Platforms

Ivanti Avalanche

Weakness Type

CWE-502, CWE-502

References