CVE-2023-38036

INFO Priority: 0.00 BB Relevance: 1/100
Published: 2025-07-12 Modified: 2026-11-04 First seen: 2026-11-03 Status: pending_score

Description

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.

Affected Software (2)

VendorProductVersion
Ivanti Avalanche 6.4.0 < 6.4.1
Ivanti Avalanche 6.4.0 < 6.4.1

Bug Bounty Relevance

1 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

2.84%
Raw Score 0.028360
Percentile 86.9%
Date 2026-11-14

EPSS Trend

2026-11-14
0.02836
2026-11-13
0.02836
2026-11-12
0.02836
2026-11-10
0.02836
2026-11-09
0.02836
2026-11-08
0.02836
2026-11-07
0.02836
2026-11-06
0.02836
2026-11-05
0.02836
2026-11-04
0.02836
2026-11-03
0.02836

Intelligence Sources

mitre ref →