CVE-2021-42128

9.8 criticalEPSS 4.6%

Critical (9.8) in ivanti avalanche. EPSS 4.6% chance of exploitation in the next 30 days.

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-749
Published: 2021-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ivanti:avalanche

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

Check your stack JSON