CVE-2023-46265 (published 2023-12-19T15:43:26.312Z)
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).
Affected products: Vendor: Ivanti
Product: Avalanche
Versions: 6.4.1