Login Request a demo
AV
Vendor
Avaya
146 products with CVEs on record
380
CVEs
0
On KEV
0
New 30D
Products
CM
Communication Manager
Avaya
7.8
17 CVEs0 on KEV0 new
MM
Modular Messaging Message Storage Server
Avaya
–
15 CVEs0 on KEV0 new
S8
S8300
Avaya
7.5
11 CVEs0 on KEV0 new
S8
S8500
Avaya
7.5
11 CVEs0 on KEV0 new
S8
S8700
Avaya
7.5
11 CVEs0 on KEV0 new
AC
Aura Communication Manager
Avaya
8.8
10 CVEs0 on KEV0 new
CC
Converged Communications Server
Avaya
7.5
10 CVEs0 on KEV0 new
DO
Definity One Media Server
Avaya
–
10 CVEs0 on KEV0 new
S8
S8100
Avaya
–
10 CVEs0 on KEV0 new
AS
Aura System Manager
Avaya
8.1
9 CVEs0 on KEV0 new
IO
IP Office
Avaya
9.8
9 CVEs0 on KEV0 new
IM
Ip600 Media Servers
Avaya
–
9 CVEs0 on KEV0 new
SE
Sip Enablement Services
Avaya
7.8
8 CVEs0 on KEV0 new
IA
Intuity Audix
Avaya
7.5
7 CVEs0 on KEV0 new
AS
Aura Session Manager
Avaya
8.1
6 CVEs0 on KEV0 new
MN
Message Networking
Avaya
7.8
6 CVEs0 on KEV0 new
MS
Messaging Storage Server
Avaya
7.8
6 CVEs0 on KEV0 new
S3
S3400
Avaya
–
6 CVEs0 on KEV0 new
AS
Aura System Platform
Avaya
8.1
5 CVEs0 on KEV0 new
IQ
IQ
Avaya
8.1
5 CVEs0 on KEV0 new
4I
4602sw IP Phone
Avaya
–
4 CVEs0 on KEV0 new
AO
Argent Office
Avaya
–
4 CVEs0 on KEV0 new
AA
Aura Application Enablement Services
Avaya
7.5
4 CVEs0 on KEV0 new
AE
Aura Experience Portal
Avaya
7.5
4 CVEs0 on KEV0 new
AP
Aura Presence Services
Avaya
8.1
4 CVEs0 on KEV0 new
AU
Aura Utility Services
Avaya
8.8
4 CVEs0 on KEV0 new
IA
Intuity Audix LX
Avaya
7.8
4 CVEs0 on KEV0 new
MN
Mn100
Avaya
–
4 CVEs0 on KEV0 new
AC
Aura Conferencing
Avaya
8.6
3 CVEs0 on KEV0 new
CM
Call Management System
Avaya
9.8
3 CVEs0 on KEV0 new
CV
Cvlan
Avaya
5.5
3 CVEs0 on KEV0 new
EC
Equinox Conferencing
Avaya
8.1
3 CVEs0 on KEV0 new
IM
Integrated Management
Avaya
–
3 CVEs0 on KEV0 new
IS
IP Soft Phone
Avaya
–
3 CVEs0 on KEV0 new
IW
IX Workforce Engagement
Avaya
6.5
3 CVEs0 on KEV0 new
LI
Libsafe
Avaya
–
3 CVEs0 on KEV0 new
ME
Meeting Exchange
Avaya
7.8
3 CVEs0 on KEV0 new
NR
Network Routing
Avaya
–
3 CVEs0 on KEV0 new
ON
One-x
Avaya
–
3 CVEs0 on KEV0 new
S8
S8710
Avaya
–
3 CVEs0 on KEV0 new
SG
Sg200
Avaya
7.5
3 CVEs0 on KEV0 new
SG
Sg203
Avaya
7.5
3 CVEs0 on KEV0 new
SG
Sg208
Avaya
7.5
3 CVEs0 on KEV0 new
SG
Sg5
Avaya
7.5
3 CVEs0 on KEV0 new
VP
Voice Portal
Avaya
7.8
3 CVEs0 on KEV0 new
VS
Vsu
Avaya
7.5
3 CVEs0 on KEV0 new
AA
Aura Appliance Virtualization Platform
Avaya
7.8
2 CVEs0 on KEV0 new
AA
Aura Application Server 5300
Avaya
7.5
2 CVEs0 on KEV0 new
AD
Aura Device Services
Avaya
9.8
2 CVEs0 on KEV0 new
AM
Aura Messaging
Avaya
8.8
2 CVEs0 on KEV0 new
AO
Aura Orchestration Designer
Avaya
6.5
2 CVEs0 on KEV0 new
AS
Aura Sip Enablement Services
Avaya
7.1
2 CVEs0 on KEV0 new
AV
Aura Voice Portal
Avaya
8.1
2 CVEs0 on KEV0 new
CM
Call Management System Server
Avaya
–
2 CVEs0 on KEV0 new
IR
Interactive Response
Avaya
5.5
2 CVEs0 on KEV0 new
IO
IP Office Contact Center
Avaya
8.8
2 CVEs0 on KEV0 new
MS
Media Server
Avaya
6.5
2 CVEs0 on KEV0 new
PC
Proactive Contact
Avaya
7.8
2 CVEs0 on KEV0 new
SP
Spaces
Avaya
6.1
2 CVEs0 on KEV0 new
9F
9608 Firmware
Avaya
5.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-49186
MS
Media Server
Avaya
6.5
0%
Jun 12The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks
CVE-2025-1041
CM
Call Management System
Avaya
9.8
0%
Jun 10An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request
CVE-2024-12756
SP
Spaces
Avaya
6.1
0%
Feb 11An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user
CVE-2024-12755
SP
Spaces
Avaya
5.4
0%
Feb 11A Cross-Site Scripting (XSS) vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information
CVE-2024-7480
AS
Aura System Manager
Avaya
4.4
0%
Aug 8An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read…
CVE-2024-7477
AS
Aura System Manager
Avaya
6.7
0%
Aug 8A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura…
CVE-2024-4197
IO
IP Office
Avaya
9.8
1%
Jun 25An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component
CVE-2024-4196
IO
IP Office
Avaya
9.8
1%
Jun 25An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web…
CVE-2023-7031
AE
Aura Experience Portal
Avaya
4.3
0%
Jan 17Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated…
CVE-2023-3722
AD
Aura Device Services
Avaya
9.8
4%
Jul 19An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious…
CVE-2023-3527
CM
Call Management System
Avaya
6.8
1%
Jul 18A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted…
CVE-2023-32218
IW
IX Workforce Engagement
Avaya
6.1
0%
May 30Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-31187
IW
IX Workforce Engagement
Avaya
6.5
0%
May 30Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials
CVE-2023-31186
IW
IX Workforce Engagement
Avaya
5.3
0%
May 30Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy
CVE-2022-38168
SP
Scopia Pathfinder 20 Pts Firmware
Avaya
9.1
1%
Nov 3Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackers to bypass the login page, access…
CVE-2022-2249
AA
Avaya Aura Communication Manager
Avaya
6.7
0%
Oct 12Avaya Aura Communication Manager Privilege Escalation Vulnerabilities
CVE-2022-2975
AA
Avaya Aura Application Enablement Services
Avaya
6.7
0%
Oct 6Avaya Aura Application Enablement Services weak permissions in web application
CVE-2021-25657
IO
IP Office
Avaya
7.8
0%
Sep 2A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges
CVE-2021-25654
AD
Aura Device Services
Avaya
7.8
1%
Jun 25An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts
CVE-2021-25656
AE
Aura Experience Portal
Avaya
5.4
0%
Jun 24Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive…
CVE-2021-25655
AE
Aura Experience Portal
Avaya
6.1
0%
Jun 24A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack
CVE-2021-25653
AA
Aura Appliance Virtualization Platform
Avaya
7.8
1%
Jun 24A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges
CVE-2021-25652
AA
Aura Appliance Virtualization Platform
Avaya
5.5
1%
Jun 24An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU)
CVE-2021-25651
AU
Aura Utility Services
Avaya
7.8
0%
Jun 24A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges
CVE-2021-25650
AU
Aura Utility Services
Avaya
8.8
1%
Jun 24A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged…
CVE-2021-25649
AU
Aura Utility Services
Avaya
5.5
1%
Jun 24An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services
CVE-2020-7038
EC
Equinox Conferencing
Avaya
7.5
1%
Apr 28A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen…
CVE-2020-7037
EC
Equinox Conferencing
Avaya
8.1
1%
Apr 28An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to…
CVE-2020-7036
CA
Callback Assist
Avaya
6.5
1%
Apr 23An XML External Entities (XXE)vulnerability in Callback Assist could allow an authenticated, remote attacker to gain read access to information that is stored on an affected…
CVE-2020-7035
AO
Aura Orchestration Designer
Avaya
6.5
1%
Apr 23An XML External Entities (XXE)vulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access…
CVE-2020-7034
SB
Session Border Controller For Enterprise
Avaya
8.8
2%
Apr 23A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute…
CVE-2020-7032
WE
Weblm
Avaya
6.5
3%
Nov 13An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks…
CVE-2020-7033
EC
Equinox Conferencing
Avaya
5.4
1%
Nov 13A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks
CVE-2020-7029
AM
Aura Messaging
Avaya
8.8
0%
Aug 11A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging
CVE-2019-7005
IO
IP Office
Avaya
7.5
1%
Aug 7A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive…
CVE-2020-7030
IO
IP Office
Avaya
5.5
1%
Jun 4A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to…
CVE-2019-7007
AC
Aura Conferencing
Avaya
8.6
2%
Feb 28A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier
CVE-2019-7004
IO
IP Office Application Server
Avaya
5.4
2%
Dec 12A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive…
CVE-2016-5285
IO
IP Office
Avaya
7.5
2%
Nov 15A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which…
CVE-2019-7000
AC
Aura Conferencing
Avaya
6.1
1%
Jul 31A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information
CVE-2019-7003
CM
Control Manager
Avaya
10.0
1%
Jul 11A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive…
CVE-2019-7001
IO
IP Office Contact Center
Avaya
8.8
1%
Apr 4A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users…
CVE-2019-7006
OC
One-x Communicator
Avaya
5.5
0%
Feb 27Avaya one-X Communicator Weak Encryption
CVE-2018-15617
CM
Communication Manager
Avaya
7.5
2%
Feb 1Communication Manager Denial of Service
CVE-2018-15614
IO
IP Office
Avaya
5.4
1%
Jan 23IP Office one-X Portal XSS
CVE-2018-15616
AA
Avaya Aura System Platform
Avaya
9.8
3%
Oct 17A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in…
CVE-2018-15611
AC
Aura Communication Manager
Avaya
6.7
0%
Sep 27A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root…
CVE-2018-15615
CM
Call Management System Supervisor
Avaya
4.4
0%
Sep 24A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS…
CVE-2018-15613
AO
Aura Orchestration Designer
Avaya
6.1
1%
Sep 21A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user
CVE-2018-15612
OD
Orchestration Designer
Avaya
8.8
0%
Sep 21A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove administrative settings
CVE-2018-15610
IO
IP Office
Avaya
8.8
2%
Sep 12A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system
CVE-2018-6635
AU
Aura
Avaya
7.5
1%
Feb 5System Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote attackers to bypass intended Remote Method Invocation…
CVE-2017-12969
IO
IP Office Contact Center
Avaya
8.8
10%
Nov 10Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap…
CVE-2017-11309
IO
IP Office
Avaya
9.6
9%
Nov 10Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response
CVE-2016-2783
VO
Vsp Operating System Software
Avaya
9.8
4%
Jan 23Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which…
CVE-2011-5096
AA
Aura Application Server 5300
Avaya
–
4%
Jul 3Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2…
CVE-2012-3811
IO
IP Office Customer Call Reporter
Avaya
–
63%
Jul 3Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release…
CVE-2011-4326
9I
96x1 IP Deskphone Firmware
Avaya
–
3%
May 17The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote…
CVE-2011-4112
9F
9608 Firmware
Avaya
5.5
0%
May 17The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by…
CVE-2011-3008
SA
Secure Access Link Gateway
Avaya
–
2%
Aug 5The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server…