Vulnerabilidades en Avaya

47 resultados
Análisis Vexday

A Avaya possui 47 vulnerabilidades registradas, sendo 6 críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web. Com nenhuma publicação nos últimos 90 dias, o risco atual é moderado e não apresenta pressão imediata de exploração.

CVE-2023-3722HIGHAvaya Aura Device Services Remote Code ExecutionEPSS 3.9%CVE-2020-7032MEDIUMAvaya WebLM Improper Restriction of XML External Entity ReferenceEPSS 3.5%CVE-2018-15616CRITICALSystem Platform Web UI DeserializationEPSS 3.3%CVE-2020-7034HIGHCommand injection in Avaya Session Border Controller for EnterpriseEPSS 2.4%CVE-2018-15617MEDIUMCommunication Manager Denial of ServiceEPSS 2.2%CVE-2019-7004MEDIUMAvaya IP Office XSS VulnerabilityEPSS 2.2%CVE-2018-15610HIGHImproper access controls in IP Office one-X PortalEPSS 1.8%CVE-2019-7007HIGHAvaya Equinox Conferencing Management (iView) Directory Traversal VulnerabilityEPSS 1.7%CVE-2019-7003CRITICALACM SQL InjectionEPSS 1.5%CVE-2020-7038HIGHAvaya Meetings Server Information Disclosure vulnerabilityEPSS 1.3%CVE-2019-7005MEDIUMUnauthenticated Information Disclosure Vulnerability in IP OfficeEPSS 1.2%CVE-2019-7001CRITICALAvaya IPOCC WebUI SQL InjectionEPSS 1.2%CVE-2019-7000MEDIUMAvaya Aura Conferencing XSSEPSS 1.1%CVE-2020-7035HIGHXXE in Avaya Aura Orchestration DesignerEPSS 1.1%CVE-2020-7037HIGHAvaya Equinox Conferencing XXE vulnerabilityEPSS 1.1%CVE-2020-7030MEDIUMIPO Information DisclosureEPSS 1.0%CVE-2020-7036HIGHXXE in Avaya Callback Assist AdministrationEPSS 1.0%CVE-2021-25654MEDIUMAvaya Aura Device Services Arbitrary Code Execution VulnerabilityEPSS 0.8%CVE-2024-4197CRITICALAvaya IP Office One-X Portal File Upload VulnerabilityEPSS 0.8%CVE-2018-15613HIGHOrchestration Designer Runtime Config XSSEPSS 0.8%