avaya

Latest CVEs · RSS

• CVE-2025-1041 2025-06-10 · CVSS 9.9
  An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affe
• CVE-2024-12756 2025-02-11 · CVSS 7.3
  An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user.
• CVE-2024-12755 2025-02-11 · CVSS 7.9
  A Cross-Site Scripting (XSS) vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information.
• CVE-2024-7480 2024-08-08 · CVSS 4.2
  An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privil
• CVE-2024-7477 2024-08-08 · CVSS 6.5
  A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries agains
• CVE-2024-4197 2024-06-25 · CVSS 9.9
  An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected
• CVE-2024-4196 2024-06-25 · CVSS 10.0
  An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web requ
• CVE-2023-7031 2024-01-17 · CVSS 5.7
  Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to a
• CVE-2023-3722 2023-07-19 · CVSS 8.6
  An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user
• CVE-2023-3527 2023-07-18 · CVSS 6.8
  A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges
• CVE-2022-2249 2022-10-12 · CVSS 7.7
  Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their pri
• CVE-2022-2975 2022-10-06 · CVSS 7.7
  A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modif
• CVE-2021-25657 2022-09-02 · CVSS 7.8
  A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges
• CVE-2021-25654 2021-06-25 · CVSS 6.2
  An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scri
• CVE-2021-25656 2021-06-24 · CVSS 5.3
  Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially d
• CVE-2021-25655 2021-06-24 · CVSS 4.4
  A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. A
• CVE-2021-25653 2021-06-24 · CVSS 8.0
  A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to
• CVE-2021-25652 2021-06-24 · CVSS 4.9
  An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). Th
• CVE-2021-25651 2021-06-24 · CVSS 8.0
  A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7
• CVE-2021-25650 2021-06-24 · CVSS 7.7
  A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts
• CVE-2021-25649 2021-06-24 · CVSS 4.9
  An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially a
• CVE-2020-7038 2021-04-28 · CVSS 7.5
  A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain ac
• CVE-2020-7037 2021-04-28 · CVSS 8.1
  An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read
• CVE-2020-7036 2021-04-23 · CVSS 8.1
  An XML External Entities (XXE)vulnerability in Callback Assist could allow an authenticated, remote attacker to gain read access to information that is stored o
• CVE-2020-7035 2021-04-23 · CVSS 8.1
  An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker t