| Package | Affected versions | Patched versions |
|---|---|---|
| avalanche | < 6.4.8.8008 | 6.4.8.8008 |
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In certain conditions, this can also lead to remote code execution
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free