Avaya vulnerabilities
47 CVEs and advisories name Avaya as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-1041Avaya Call Management System RCE vulnerability
- CVE-2024-12756Avaya Spaces HTML injection (HTMLi) Vulnerability
- CVE-2024-12755Avaya Spaces XSS Vulnerability
- CVE-2024-7480Improper access control in Avaya Aura System Manager
- CVE-2024-7477Avaya Aura System Manager SQL injection vulnerability
- CVE-2024-4197Avaya IP Office One-X Portal File Upload Vulnerability
- CVE-2024-4196Avaya IP Office Web Control RCE Vulnerability
- CVE-2023-7031Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities
- CVE-2023-3722Avaya Aura Device Services Remote Code Execution
- CVE-2023-3527Avaya Call Management System CSV injection vulnerability
- CVE-2023-32218Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
- CVE-2023-31187Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials
- CVE-2023-31186Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy
- CVE-2022-2249Avaya Aura Communication Manager Privilege Escalation Vulnerabilities
- CVE-2022-2975Avaya Aura Application Enablement Services weak permissions in web application
- CVE-2021-25657Avaya IP Office Privilege Escalation Vulnerability
- CVE-2021-25654Avaya Aura Device Services Arbitrary Code Execution Vulnerability
- CVE-2021-25656Avaya Aura Experience Portal XSS vulnerabilities
- CVE-2021-25655URL redirection to untrusted site possible in Avaya Aura Experience Portal
- CVE-2021-25653Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability
- CVE-2021-25652Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability
- CVE-2021-25651Avaya Aura Utility Services Privilege Escalation Vulnerability
- CVE-2021-25650Avaya Aura Utility Services Privilege Escalation Vulnerability
- CVE-2021-25649Avaya Utility Services Sensitive Information Disclosure Vulnerability
- CVE-2020-7038Avaya Meetings Server Information Disclosure vulnerability
- CVE-2020-7037Avaya Equinox Conferencing XXE vulnerability
- CVE-2020-7036XXE in Avaya Callback Assist Administration
- CVE-2020-7035XXE in Avaya Aura Orchestration Designer
- CVE-2020-7034Command injection in Avaya Session Border Controller for Enterprise
- CVE-2020-7032Avaya WebLM Improper Restriction of XML External Entity Reference