CVE-2024-38653 Scanner
CVE-2024-38653 scanner - XML External Entity (XXE) vulnerability in Ivanti Avalanche SmartDeviceServer
Used 2.2k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-38653
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
avalanche
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: avalanche
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →