Log in Start free

Avaya

Products

ProductCVEsExploitedLatest
IP Office4–Jun 25, 2024
IX Workforce Engagement3–May 30, 2023
Avaya Aura Utility Services3–Jun 24, 2021
Aura System Manager2–Aug 8, 2024
Avaya Call Management System2–Jun 10, 2025
Avaya Spaces2–Feb 11, 2025
Avaya Aura Communication Manager2–Oct 12, 2022
Avaya Aura Appliance Virtualization Platform Utilities2–Jun 24, 2021
Avaya Meetings Server1–Apr 28, 2021
Callback Assist1–Apr 23, 2021
Experience Portal Manager1–Jan 17, 2024
Product1–Jun 24, 2021
Session Border Controller for Enterprise1–Apr 23, 2021
System Manager1–Nov 13, 2020
Aura Device Services1–Jul 19, 2023
WebLM1–Nov 13, 2020
Aura Orchestration Designer1–Apr 23, 2021
Avaya Aura Application Enablement Services1–Oct 6, 2022
Avaya Aura Devices Services1–Jun 25, 2021
Avaya Aura Messaging1–Aug 11, 2020
Avaya Equinox Conferencing1–Nov 12, 2020
Avaya Experience Portal1–Jun 24, 2021
Avaya Meetings Management1–Apr 28, 2021

Exploited and recent CVEs

  • CVE-2025-1041 Critical 9.9 Avaya Call Management System RCE vulnerability 0.5%
  • CVE-2024-12756 High 7.3 Avaya Spaces HTML injection (HTMLi) Vulnerability 0.3%
  • CVE-2024-12755 High 7.9 Avaya Spaces XSS Vulnerability 0.3%
  • CVE-2024-7480 Medium 4.2 Improper access control in Avaya Aura System Manager 0.2%
  • CVE-2024-7477 Medium 6.5 Avaya Aura System Manager SQL injection vulnerability 0.2%
  • CVE-2024-4197 Critical 9.9 Avaya IP Office One-X Portal File Upload Vulnerability 0.8%
  • CVE-2024-4196 Critical 10.0 Avaya IP Office Web Control RCE Vulnerability 0.6%
  • CVE-2023-7031 Medium 5.7 Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities 0.3%
  • CVE-2023-3722 High 8.6 Avaya Aura Device Services Remote Code Execution 3.9%
  • CVE-2023-3527 Medium 6.8 Avaya Call Management System CSV injection vulnerability 0.6%
  • CVE-2023-31186 Medium 5.3 Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy 0.4%
  • CVE-2023-31187 Medium 6.5 Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials 0.5%
  • CVE-2023-32218 Medium 6.1 Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') 0.3%
  • CVE-2022-2249 High 7.7 Avaya Aura Communication Manager Privilege Escalation Vulnerabilities 0.2%
  • CVE-2022-2975 High 7.7 Avaya Aura Application Enablement Services weak permissions in web application 0.2%
  • CVE-2021-25657 High 7.8 Avaya IP Office Privilege Escalation Vulnerability 0.3%
  • CVE-2021-25654 Medium 6.2 Avaya Aura Device Services Arbitrary Code Execution Vulnerability 0.8%
  • CVE-2021-25656 Medium 5.3 Avaya Aura Experience Portal XSS vulnerabilities 0.3%
  • CVE-2021-25655 Medium 4.4 URL redirection to untrusted site possible in Avaya Aura Experience Portal 0.4%
  • CVE-2021-25653 High 8.0 Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability 0.6%
  • CVE-2021-25652 Medium 4.9 Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability 0.7%
  • CVE-2021-25651 High 8.0 Avaya Aura Utility Services Privilege Escalation Vulnerability 0.5%
  • CVE-2021-25650 High 7.7 Avaya Aura Utility Services Privilege Escalation Vulnerability 0.5%
  • CVE-2021-25649 Medium 4.9 Avaya Utility Services Sensitive Information Disclosure Vulnerability 0.6%
  • CVE-2020-7038 High 7.5 Avaya Meetings Server Information Disclosure vulnerability 1.3%
  • CVE-2020-7037 High 8.1 Avaya Equinox Conferencing XXE vulnerability 1.1%
  • CVE-2020-7036 High 8.1 XXE in Avaya Callback Assist Administration 1.0%
  • CVE-2020-7035 High 8.1 XXE in Avaya Aura Orchestration Designer 1.1%
  • CVE-2020-7034 High 7.2 Command injection in Avaya Session Border Controller for Enterprise 2.4%
  • CVE-2020-7032 Medium 6.5 Avaya WebLM Improper Restriction of XML External Entity Reference 2.9%