CVE-2021-42125

8.8 highEPSS 82%

High (8.8) in ivanti avalanche. EPSS 82% chance of exploitation in the next 30 days.

An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 82% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWEs: CWE-434, CWE-502
Published: 2021-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ivanti:avalanche

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

Check your stack JSON