VULNERABILITY INTELLIGENCE

CVE-2025-8297

CVSS score7.2 HIGH

EPSS probability1.26%

CISA KEVNot currently listed

Published2025-08-12

Last modified2026-06-17

Description

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution