CVE-2021-42130
HIGHIvanti Avalanche < 6.3.3 - Insecure Deserialization
Title source: ruleDescription
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.
Scores
CVSS v3
8.8
EPSS
0.7666
EPSS Percentile
98.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
ivanti/avalanche
< 6.3.3
Timeline
Published
Dec 07, 2021
Tracked Since
Feb 18, 2026