critical9.8
CVE-2023-46265
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).
Impact
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Avalanche | through 6.4.1 |