| Package | Affected versions | Patched versions |
|---|---|---|
| avalanche | = 6.3.1= 6.3.1.1507= 6.3.2= 6.3.2.3490= 6.3.3= 6.3.3.101= 6.3.4= 6.3.4.153= 6.4.0= 6.4.1= 6.4.1.207= 6.4.1.236= 6.4.2 |
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free