Avaya Aura vulnerabilities

• avaya aura system manager Improper access control in Avaya Aura System Manager CVE-2024-7480 4.2 MediumAugust 8, 2024
• avaya aura system manager Avaya Aura System Manager SQL injection vulnerability CVE-2024-7477 6.5 MediumAugust 8, 2024
• avaya aura experience portal, experience portal manager +1 more Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities CVE-2023-7031 5.7 MediumJanuary 17, 2024
• avaya aura device services Avaya Aura Device Services Remote Code Execution CVE-2023-3722 Public exploit 8.6 HighJuly 19, 2023
• avaya aura communication manager Avaya Aura Communication Manager Privilege Escalation Vulnerabilities CVE-2022-2249 7.7 HighOctober 12, 2022
• avaya aura application enablement services Avaya Aura Application Enablement Services weak permissions in web application CVE-2022-2975 7.7 HighOctober 6, 2022
• avaya aura device services, aura devices services +1 more Avaya Aura Device Services Arbitrary Code Execution Vulnerability CVE-2021-25654 6.2 MediumJune 25, 2021
• avaya aura experience portal, product +1 more Avaya Aura Experience Portal XSS vulnerabilities CVE-2021-25656 5.3 MediumJune 24, 2021
• avaya aura experience portal, experience portal +1 more URL redirection to untrusted site possible in Avaya Aura Experience Portal CVE-2021-25655 4.4 MediumJune 24, 2021
• avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 more Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability CVE-2021-25653 8.0 HighJune 24, 2021
• avaya aura appliance virtualization platform, aura appliance virtualization platform utilities +1 more Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability CVE-2021-25652 4.9 MediumJune 24, 2021
• avaya aura utility services Avaya Aura Utility Services Privilege Escalation Vulnerability CVE-2021-25651 8.0 HighJune 24, 2021
• avaya aura utility services Avaya Aura Utility Services Privilege Escalation Vulnerability CVE-2021-25650 7.7 HighJune 24, 2021
• avaya aura utility services Avaya Utility Services Sensitive Information Disclosure Vulnerability CVE-2021-25649 4.9 MediumJune 24, 2021
• avaya aura orchestration designer XXE in Avaya Aura Orchestration Designer CVE-2020-7035 8.1 HighApril 23, 2021
• avaya weblm, aura system manager, system manager +2 more Avaya WebLM Improper Restriction of XML External Entity Reference CVE-2020-7032 6.5 MediumNovember 13, 2020
• avaya aura communication manager, aura messaging +1 more Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability CVE-2020-7029 6.4 MediumAugust 11, 2020
• avaya equinox conferencing management (iview), aura conferencing +1 more Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability CVE-2019-7007 7.5 HighFebruary 28, 2020
• avaya aura conferencing Avaya Aura Conferencing XSS CVE-2019-7000 5.9 MediumJuly 31, 2019
• avaya aura communication manager, communication manager +1 more Communication Manager Denial of Service CVE-2018-15617 6.5 MediumFebruary 1, 2019
• avaya aura system platform, aura® system platform +1 more System Platform Web UI Deserialization CVE-2018-15616 9.0 CriticalOctober 17, 2018
• avaya aura communication manager, communication manager +1 more Communication Manager Local Administrator PrivEsc CVE-2018-15611 6.3 MediumSeptember 27, 2018
• avaya aura orchestration designer, orchestration designer +1 more Orchestration Designer Runtime Config XSS CVE-2018-15613 8.3 HighSeptember 21, 2018
• avaya aura System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with... CVE-2018-6635 7.5 HighFebruary 5, 2018
• mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 more Null pointer dereference vulnerability exists in K11_SignWithSymKey /... CVE-2016-5285 Fix available 7.5 HighNovember 16, 2016
• avaya aura application server 5300 Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura... CVE-2011-5096 10.0 HighJuly 3, 2012
• microsoft windows 7, windows server 2003, windows server 2008 +32 more +34 more win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003... CVE-2011-1229 7.2 HighApril 13, 2011
• linux kernel, avaya aura communication manager, aura presence services +7 more +9 more The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees... CVE-2010-2943 Public exploit EPSS 17.0% 8.1 HighSeptember 30, 2010
• linux kernel, avaya aura communication manager, aura presence services +10 more +12 more The actions implementation in the network queueing functionality in the Linux kernel before 2.6... CVE-2010-2942 5.5 MediumSeptember 21, 2010
• linux kernel, avaya aura communication manager, aura presence services +6 more +8 more Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs... CVE-2010-2492 7.8 HighSeptember 8, 2010
• debian linux, linux kernel, avaya aura communication manager +12 more +14 more The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an... CVE-2010-2798 7.8 HighAugust 19, 2010
• debian linux, linux kernel, avaya aura application enablement services +15 more +17 more The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has... CVE-2009-3939 7.1 HighNovember 16, 2009
• busybox, avaya aura application enablement services, aura sip enablement services +2 more +4 more BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local... CVE-2006-1058 Fix available 5.5 MediumApril 4, 2006