CVE-2021-42125
HIGHIvanti Avalanche < 6.3.3 - Insecure Deserialization
Title source: ruleDescription
An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.
Scores
CVSS v3
8.8
EPSS
0.6502
EPSS Percentile
98.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
CWE-434
Status
published
Affected Products (1)
ivanti/avalanche
< 6.3.3
Timeline
Published
Dec 07, 2021
Tracked Since
Feb 18, 2026