CVE-2024-38653: XXE vulnerability in Ivanti Avalanche allows attackers to read sensitive files. This impacts versions up to 6.3.1, potentially exposing confidential data. The vulnerability resides in the SmartDeviceServer component, enabling an unauthenticated, remote attacker to exploit it. With an SVRS score of 68, while not critical, this vulnerability is a significant risk requiring close monitoring and mitigation planning. The remote file access could lead to further compromise of the system. Because the vulnerability is already tagged "In The Wild", it is important to apply appropriate security measures promptly to prevent potential data breaches and system compromise.