Avaya vulnerabilities

Products

• Communication Manager 16
• Modular Messaging Message Storage Server 15
• S8300 11
• S8500 11
• S8700 11
• Aura Communication Manager 10
• Converged Communications Server 10
• Definity One Media Server 10
• S8100 10
• Aura System Manager 9
• Ip600 Media Servers 9
• Ip Office 9
• Sip Enablement Services 8
• Intuity Audix 7
• Ip Office 7
• Aura Session Manager 6
• Message Networking 6
• Messaging Storage Server 6
• S3400 6
• Aura System Platform 5
• Iq 5
• 4602sw Ip Phone 4
• Argent Office 4
• Aura Application Enablement Services 4
• Aura Experience Portal 4
• Aura Presence Services 4
• Aura Utility Services 4
• Intuity Audix Lx 4
• Mn100 4
• Aura Conferencing 3
• Aura Utility Services 3
• Call Management System 3
• Cvlan 3
• Equinox Conferencing 3
• Integrated Management 3
• Ip Soft Phone 3
• Ix Workforce Engagement 3
• Ix Workforce Engagement 3
• Libsafe 3
• Meeting Exchange 3

Show 30 moreShow less

• Network Routing 3
• One-x 3
• S8710 3
• Sg200 3
• Sg203 3
• Sg208 3
• Sg5 3
• System Manager 3
• Voice Portal 3
• Vsu 3
• Aura Appliance Virtualization Platform 2
• Aura Application Server 5300 2
• Aura Device Services 2
• Aura Messaging 2
• Aura Orchestration Designer 2
• Aura Sip Enablement Services 2
• Aura System Manager 2
• Aura Voice Portal 2
• Aura Appliance Virtualization Platform Utilities 2
• Aura Communication Manager 2
• Call Management System 2
• Spaces 2
• Call Management System Server 2
• Communication Manager 2
• Interactive Response 2
• Ip Office Contact Center 2
• Media Server 2
• Orchestration Designer 2
• Proactive Contact 2
• Spaces 2

Newest

• avaya system manager CVE-2026-16305 CVE-2026-16305 7.8 HighNovember 2, 2026
• avaya system manager CVE-2026-16306 CVE-2026-16306 9.8 CriticalNovember 2, 2026
• avaya media server, sick baggage analytics, field analytics +3 more +5 more No brute-force protection CVE-2025-49186 5.3 MediumJune 12, 2025
• avaya call management system Avaya Call Management System RCE vulnerability CVE-2025-1041 9.9 CriticalJune 10, 2025
• avaya spaces Avaya Spaces HTML injection (HTMLi) Vulnerability CVE-2024-12756 7.3 HighFebruary 11, 2025
• avaya spaces Avaya Spaces XSS Vulnerability CVE-2024-12755 7.9 HighFebruary 11, 2025
• avaya aura system manager Improper access control in Avaya Aura System Manager CVE-2024-7480 4.2 MediumAugust 8, 2024
• avaya aura system manager Avaya Aura System Manager SQL injection vulnerability CVE-2024-7477 6.5 MediumAugust 8, 2024
• avaya ip office Avaya IP Office One-X Portal File Upload Vulnerability CVE-2024-4197 9.9 CriticalJune 25, 2024
• avaya ip office Avaya IP Office Web Control RCE Vulnerability CVE-2024-4196 10.0 CriticalJune 25, 2024
• avaya aura experience portal, experience portal manager +1 more Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities CVE-2023-7031 5.7 MediumJanuary 17, 2024
• avaya aura device services Avaya Aura Device Services Remote Code Execution CVE-2023-3722 Public exploit 8.6 HighJuly 19, 2023
• avaya call management system Avaya Call Management System CSV injection vulnerability CVE-2023-3527 6.8 MediumJuly 18, 2023
• avaya ix workforce engagement Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-32218 6.1 MediumMay 30, 2023
• avaya ix workforce engagement Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials CVE-2023-31187 6.5 MediumMay 30, 2023
• avaya ix workforce engagement Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy CVE-2023-31186 5.3 MediumMay 30, 2023
• avaya scopia pathfinder 10 pts firmware, scopia pathfinder 20 pts firmware +1 more ** UNSUPPPORTED WHEN ASSIGNED **Broken Access Control in User Authentication in Avaya Scopia... CVE-2022-38168 9.1 CriticalNovember 3, 2022
• avaya aura communication manager Avaya Aura Communication Manager Privilege Escalation Vulnerabilities CVE-2022-2249 7.7 HighOctober 12, 2022
• avaya aura application enablement services Avaya Aura Application Enablement Services weak permissions in web application CVE-2022-2975 7.7 HighOctober 6, 2022
• avaya ip office Avaya IP Office Privilege Escalation Vulnerability CVE-2021-25657 7.8 HighSeptember 2, 2022
• avaya aura device services, aura devices services +1 more Avaya Aura Device Services Arbitrary Code Execution Vulnerability CVE-2021-25654 6.2 MediumJune 25, 2021
• avaya aura experience portal, product +1 more Avaya Aura Experience Portal XSS vulnerabilities CVE-2021-25656 5.3 MediumJune 24, 2021
• avaya aura experience portal, experience portal +1 more URL redirection to untrusted site possible in Avaya Aura Experience Portal CVE-2021-25655 4.4 MediumJune 24, 2021
• avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 more Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability CVE-2021-25653 8.0 HighJune 24, 2021
• avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 more Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability CVE-2021-25652 4.9 MediumJune 24, 2021
• avaya aura utility services Avaya Aura Utility Services Privilege Escalation Vulnerability CVE-2021-25651 8.0 HighJune 24, 2021
• avaya aura utility services Avaya Aura Utility Services Privilege Escalation Vulnerability CVE-2021-25650 7.7 HighJune 24, 2021
• avaya aura utility services Avaya Utility Services Sensitive Information Disclosure Vulnerability CVE-2021-25649 4.9 MediumJune 24, 2021
• avaya equinox conferencing, meetings management +1 more Avaya Meetings Server Information Disclosure vulnerability CVE-2020-7038 7.5 HighApril 28, 2021
• avaya meetings server, equinox conferencing +1 more Avaya Equinox Conferencing XXE vulnerability CVE-2020-7037 8.1 HighApril 28, 2021
• avaya callback assist XXE in Avaya Callback Assist Administration CVE-2020-7036 8.1 HighApril 23, 2021
• avaya aura orchestration designer XXE in Avaya Aura Orchestration Designer CVE-2020-7035 8.1 HighApril 23, 2021
• avaya session border controller for enterprise Command injection in Avaya Session Border Controller for Enterprise CVE-2020-7034 7.2 HighApril 23, 2021
• avaya weblm, aura system manager, system manager +2 more Avaya WebLM Improper Restriction of XML External Entity Reference CVE-2020-7032 6.5 MediumNovember 13, 2020
• avaya equinox conferencing Avaya Equinox Conferencing XSS CVE-2020-7033 6.3 MediumNovember 12, 2020
• avaya aura communication manager, aura messaging +1 more Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability CVE-2020-7029 6.4 MediumAugust 11, 2020
• avaya ip office Unauthenticated Information Disclosure Vulnerability in IP Office CVE-2019-7005 5.9 MediumAugust 7, 2020
• avaya ip office IPO Information Disclosure CVE-2020-7030 Public exploit 5.5 MediumJune 3, 2020
• avaya equinox conferencing management (iview), aura conferencing +1 more Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability CVE-2019-7007 7.5 HighFebruary 28, 2020
• avaya ip office application server Avaya IP Office XSS Vulnerability CVE-2019-7004 Public exploit 6.4 MediumDecember 11, 2019
• avaya aura conferencing Avaya Aura Conferencing XSS CVE-2019-7000 5.9 MediumJuly 31, 2019
• avaya control manager ACM SQL Injection CVE-2019-7003 9.3 CriticalJuly 11, 2019
• avaya ip office contact center Avaya IPOCC WebUI SQL Injection CVE-2019-7001 9.9 CriticalApril 4, 2019
• avaya one-x communicator Avaya one-X Communicator Weak Encryption CVE-2019-7006 6.5 MediumFebruary 27, 2019
• avaya aura communication manager, communication manager +1 more Communication Manager Denial of Service CVE-2018-15617 6.5 MediumFebruary 1, 2019
• avaya ip office IP Office one-X Portal XSS CVE-2018-15614 6.8 MediumJanuary 23, 2019
• avaya aura system platform, aura® system platform +1 more System Platform Web UI Deserialization CVE-2018-15616 9.0 CriticalOctober 17, 2018
• avaya aura communication manager, communication manager +1 more Communication Manager Local Administrator PrivEsc CVE-2018-15611 6.3 MediumSeptember 27, 2018
• avaya call management system supervisor CMS Supervisor Information Disclosure CVE-2018-15615 7.2 HighSeptember 24, 2018
• avaya aura orchestration designer, orchestration designer +1 more Orchestration Designer Runtime Config XSS CVE-2018-15613 8.3 HighSeptember 21, 2018
• Show olderLoading…