Skip to contentAvaya vulnerabilities
Products
Show 10 moreShow less
Newest
- avaya orchestration designerOrchestration Designer Runtime Config CSRFCVE-2018-156128.3 High
- avaya ip officeImproper access controls in IP Office one-X PortalCVE-2018-156107.3 High
- avaya auraSystem Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with...CVE-2018-66357.5 High
- avaya ip office contact centerBuffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center...CVE-2017-12969Public exploitEPSS 10.1%8.8 High
- avaya ip officeBuffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers...CVE-2017-11309Public exploit9.6 Critical
- avaya vsp operating system softwareAvaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2...CVE-2016-2783Public exploit9.8 Critical
- mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 moreNull pointer dereference vulnerability exists in K11_SignWithSymKey /...CVE-2016-5285Fix available7.5 High
- avaya aura application server 5300Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura...CVE-2011-509610.0 High
- avaya ip office customer call reporterUnrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya...CVE-2012-3811Public exploitEPSS 62.5%10.0 High
- linux kernel, avaya 9608 firmware, 9608g firmware +4 more +6 moreThe net subsystem in the Linux kernel before 3.1 does not properly restrict use of the...CVE-2011-41125.5 Medium
- linux kernel, avaya 96x1 ip deskphone firmware +1 moreThe udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a...CVE-2011-43267.1 High
- avaya secure access link gatewayThe default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains...CVE-2011-30085.0 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +32 more +34 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...CVE-2011-12297.2 High
- linux kernel, avaya aura communication manager, aura presence services +7 more +9 moreThe xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees...CVE-2010-2943Public exploitEPSS 17.0%8.1 High
- linux kernel, avaya aura communication manager, aura presence services +10 more +12 moreThe actions implementation in the network queueing functionality in the Linux kernel before 2.6...CVE-2010-29425.5 Medium
- linux kernel, avaya aura communication manager, aura presence services +6 more +8 moreBuffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs...CVE-2010-24927.8 High
- debian linux, linux kernel, avaya aura communication manager +12 more +14 moreThe gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an...CVE-2010-27987.8 High
- debian linux, linux kernel, avaya aura application enablement services +15 more +17 moreThe poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has...CVE-2009-39397.1 High
- avaya communication managerUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1...CVE-2008-67119.0 High
- avaya communication managerUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1...CVE-2008-67109.0 High
- avaya communication manager, sip enablement services +1 moreUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES)...CVE-2008-67099.0 High
- avaya communication manager, sip enablement services +1 moreUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES)...CVE-2008-67089.0 High
- avaya communication manager, sip enablement services +1 moreThe Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with...CVE-2008-67076.4 Medium
- avaya communication manager, sip enablement services +1 moreMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement...CVE-2008-67067.8 High
- avaya communication managerUnspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya...CVE-2008-65756.8 Medium
- avaya communication managerUnspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x...CVE-2008-65747.5 High
- avaya communication managerMultiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya...CVE-2008-65736.8 Medium
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 moreThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as...CVE-2009-0115Fix available7.8 High
- avaya ip soft phoneUnspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to...CVE-2008-61415.0 Medium
- avaya one-xUnspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X...CVE-2008-61405.0 Medium
- avaya broadcast serverSQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS)...CVE-2008-58827.5 High
- avaya communication managerMultiple unspecified vulnerabilities in the web management interface in Avaya Communication...CVE-2008-57105.0 Medium
- avaya communication managerMultiple unspecified vulnerabilities in the web management interface in Avaya Communication...CVE-2008-57099.0 High
- avaya communication manager, sip enablement services +1 moreThe remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement...CVE-2008-37787.5 High
- avaya communication manager, sip enablement services +1 moreThe SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication...CVE-2008-37772.1 Low
- avaya messaging storage serverMultiple unspecified "input validation" vulnerabilities in the Web management interface (aka...CVE-2008-30816.5 Medium
- debian linux, linux kernel, avaya communication manager +12 more +14 moreThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local...CVE-2008-28127.8 High
- avaya message networking, messaging storage server +1 moreUnspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS)...CVE-2007-58307.8 High
- avaya voip handsetUnspecified vulnerability in the Avaya VoIP Handset allows remote attackers to cause a denial of...CVE-2007-55567.8 High
- avaya ip soft phoneMultiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5...CVE-2007-32866.8 Medium
- avaya 4602sw ip phoneThe Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant...CVE-2007-33225.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote...CVE-2007-33215.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE...CVE-2007-33205.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the...CVE-2007-33197.5 High
- avaya one-xBuffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing...CVE-2007-33185.0 Medium
- avaya one-xThe Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya...CVE-2007-33177.8 High
- microsoft windows 2000, avaya definity one media server, media server +4 more +6 moreUnspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted...CVE-2007-2374EPSS 17.4%9.3 High
- microsoft ie, internet explorer, windows 2000 +7 more +9 moreUnspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to...CVE-2007-1765Public exploitEPSS 54.9%9.3 High
- avaya s8300, s8500, s8700 +1 more +3 moreApache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections...CVE-2007-14915.2 Medium
- avaya communication managerUnspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES...CVE-2007-14906.0 Medium
- Show moreLoading…