AC
Product
Aura Communication Manager
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 3Low 0
Watch
Add Aura Communication Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7029 | 8.8 | Aug 11 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging Affected: 7.0 through 7.1.3.4; 8.0 before 8.1.0.0 |
| CVE-2010-2943 | 8.1 | Sep 30 | The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read… Affected: 5.2 |
| CVE-2010-2798 | 7.8 | Sep 8 | The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries,… Affected: 5.2 |
| CVE-2010-2492 | 7.8 | Sep 8 | Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or… Affected: 5.2 |
| CVE-2016-5285 | 7.5 | Nov 15 | A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which… Affected: 6.0 through 6.3.117.0; 7.0; 7.0; 7.0 |
| CVE-2018-15617 | 7.5 | Feb 1 | Communication Manager Denial of Service Affected: 6.3.0.1 through 6.3.17.0; 7.0 before 7.1.3.2; 8.0 before 8.0.1 |
| CVE-2009-3939 | 7.1 | Nov 16 | The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the… Affected: 5.2 |
| CVE-2022-2249 | 6.7 | Oct 12 | Avaya Aura Communication Manager Privilege Escalation Vulnerabilities Affected: 8.0 before 8.1.3.4; 10.1.0.0 |
| CVE-2018-15611 | 6.7 | Sep 27 | A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root… Affected: 6.3.0.1 through 6.3.17.0; 7.0 before 7.1.3.1 |
| CVE-2010-2942 | 5.5 | Sep 21 | The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump… Affected: 5.2 |
Showing 10