← Database

CVE-2024-38653

HIGH CVSS: 7.5 Published: 2024-08-14 Modified: 2026-06-17

Description

XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.

Affected Platforms

Ivanti Avalanche

Weakness Type

CWE-611, CWE-611

References