Login Request a demo
CM
Product
Call Management System
by Avaya · last CVE Jun 10, 2025
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Call Management System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1041
9.8
0%
Jun 10
An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request
Affected: 18.0.0.1 before 19.2.0.7; 20.0 before 20.0.1.0
CVE-2016-5285
7.5
2%
Nov 15
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which…
Affected: 18.0.0.1 through 18.0.0.2; 17.0; 17.0; 17.0; 17.0; 17.0
CVE-2023-3527
6.8
1%
Jul 18
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted…
Affected: before 20.0.0.0
Showing 3