CVE-2023-32567

Summary

Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236

Affected Software

VendorProductVersion RangeStatus
IvantiWavelink6.4.1.236 < 6.4.1.236affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References