Description
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In certain conditions, this can also lead to remote code execution
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Avalanche | — | 6.4.8.8008 |
Advisories 1
- WID-SEC-2025-1775 Ivanti Avalanche: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Aug 12, 2025