Vulners
Lucene search
4 matches found
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
9.8CVSS6.9AI score0.02148EPSS
Exploits0References1
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
9.8CVSS7.2AI score0.02148EPSS
Exploits0References1
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
6.5CVSS9.7AI score0.02148EPSS
Exploits0References1
CVE-2023-32567
Ivanti Avalanche contains an XXE-related vulnerability in the decodeToMap XML processing, enabling potential information disclosure in affected installations. The issue stems from improper handling of XML External Entity references within the decodeToMap method. Public advisories (ZDI-23-1167) de...
9.8CVSS6.5AI score0.02148EPSS
Exploits0References1Affected Software1
20