References https://nvd.nist.gov/vuln/detail/CVE-2021-42131 https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3 https://www.cvedetails.com/cve/CVE-2021-42131/ https://www.vulmon.com/searchpage?q=Ivanti%20Avalanche%206.3.3&scoretype=epss https://vulners.com/search?query=Ivanti+Avalanche+EnterpriseServer+SQL+Injection https://avd.aliyun.com/detail?id=AVD-2021-42131 https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:MISC:IVANTI-PDS-SRV-CMD-INJ.html https://feedly.com/cve/vendors/ivanti?page=4
Related VulnerabilitiesPoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code InjectionPoCCVE-2026-10520: Ivanti Sentry - OS Command InjectionIvanti Sentry存在操作系统命令注入漏洞(CVE-2026-10520)Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞(CVE-2026-10520)Ivanti EPMM /mifs/rs/api/v2/featureusage 命令执行漏洞(CVE-2025-4427)PoCIvanti Endpoint Manager /RemoteControlAuth/api/Auth 权限绕过漏洞(CVE-2026-1603)Ivanti Endpoint Manager 权限管理不当漏洞PoCCVE-2026-1603: Ivanti Endpoint Manager - Authentication BypassIvanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞(CVE-2026-1281/CVE-2026-1340)Ivanti Endpoint Manager Mobile 未授权 代码注入漏洞Ivanti多个产品跨站请求伪造漏洞(CVE-2025-8711)(CVE-2025-8712)Ivanti产品权限验证不足漏洞