CVE-2024-38653

HIGH 8.2EPSS 92.0%

XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.0: 8.2 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS: 91.98% chance of exploitation in the next 30 days, 100th percentile
Nuclei: high · CWE-611
Published: 2024-08-14

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38653.yaml

References

Related