Skip to content
OpenAdvisories

Vendor

Avaya

47 known vulnerabilities.

Products

IP Office 7 Avaya Aura Utility Services 3 IX Workforce Engagement 3 Avaya Spaces 2 Avaya Aura Appliance Virtualization Platform Utilities 2 Communication Manager 2 Avaya Aura Communication Manager 2 Orchestration Designer 2 Aura System Manager 2 Avaya Call Management System 2 Session Border Controller for Enterprise 1 Avaya Aura Messaging 1 WebLM 1 System Manager 1 Avaya Aura® System Platform 1 Avaya Aura Devices Services 1 Call Management System Supervisor 1 Avaya Meetings Management 1 IP Office Application Server 1 Equinox Conferencing Management (iView) 1 IP Office Contact Center 1 Aura Device Services 1 Avaya Control Manager 1 Avaya Aura Conferencing 1 Avaya Aura Application Enablement Services 1 Experience Portal Manager 1 Avaya Equinox Conferencing 1 Aura Orchestration Designer 1 Avaya Meetings Server 1 Callback Assist 1 Avaya Experience Portal 1 IX Workforce Engagement v15.2.7.1195 0 Aura Utility Services 0 Aura Device Services < 8.1.4.1.40 0 Breeze Platform 0 Session Border Controller 0 one-X 0 Aura Experience Portal 0 Oceana 0 CMS < 20.0.0.0 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2023-3722 Public exploit Scanner template

    Avaya Aura Device Services Remote Code Execution

    An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and e…

    Avaya Aura Device Services
  • Medium 5.5
    CVE-2020-7030 Public exploit

    IPO Information Disclosure

    A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.…

    Avaya IP Office
  • Medium 6.4
    CVE-2019-7004 Public exploit

    Avaya IP Office XSS Vulnerability

    A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, i…

    Avaya IP Office Application Server