CVE-2025-8297 | BDVDB-2026-289113 Detail
IvantiAvalanche
Description#
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution
Impact#
CAPEC-163: File Upload
Weaknesses#
- CWE-434 Unrestricted Upload of File with Dangerous Type
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.