Avaya Vulnérabilités

Chronologie

Taper

Produit

Avaya Communication Manager14
Avaya IP Office6
Avaya Aura Communication Manager4
Avaya SIP Enablement Services4
Avaya 4602SW IP Phone4

Contre-mesures

Official Fix48
Temporary Fix0
Workaround5
Unavailable6
Not Defined46

Exploitabilité

High2
Functional2
Proof-of-Concept23
Unproven11
Not Defined67

Vecteur d'accès

Not Defined0
Physical0
Local18
Adjacent2
Network85

Authentification

Not Defined0
High10
Low34
None61

Interaction de l'utilisateur

Not Defined0
Required15
None90

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤45
≤510
≤629
≤720
≤823
≤98
≤108

CVSSv3 Temp

≤10
≤20
≤32
≤45
≤519
≤628
≤725
≤813
≤912
≤101

VulDB

≤10
≤21
≤32
≤412
≤511
≤626
≤717
≤825
≤93
≤108

NVD

≤10
≤20
≤30
≤40
≤52
≤65
≤78
≤83
≤94
≤105

CNA

≤10
≤20
≤30
≤40
≤50
≤63
≤78
≤86
≤93
≤102

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k17
<2k48
<5k38
<10k2
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k103
<2k1
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (62): 4602SW IP Phone (4), Argent Office (4), Aura (1), Aura Appliance Virtualization Platform Utilities (2), Aura Application Enablement Services (1), Aura Application Server 5300 (1), Aura Communication Manager (4), Aura Conferencing (1), Aura Device Services (2), Aura Experience Portal (2), Aura Experience Portal Manager (1), Aura Messaging (1), Aura Orchestration Designer (3), Aura System Platform (1), Aura Utility Services (3), Cajun P130 (2), Cajun P330 (2), Cajun P550R (1), Call Management System (1), Callback Assist (1), Communication Manager (14), Control Manager (1), Equinox Conferencing (3), Equinox Management (1), Fabric Connect Virtual Services Platform (1), G700 Media Gateway (1), IP Office (6), IP Office Application Server (1), IP Office Contact Center (2), IP Office Customer Call Reporter (2), IP Office Phone Manager (1), IP Office one-X Portal (2), IP Soft Phone (1), IP Softphone (1), IX Workforce Engagement (3), Interaction Center (1), Libsafe (2), Management System (1), Messaging Storage Server (2), Modular Messaging Message Storage Server (1), One-X Portal for IP Office (1), P330 (1), P580 (1), P880 (1), P882 (1), S87XX (1), S8300 (3), S8500 (2), SIP Enablement Services (4), Scopia Pathfinder 10 (1), Scopia Pathfinder 20 PTS (1), Secure Access Link Gateway (1), Session Border Controller for Enterprise (1), TN2602AP IP Media Resource 320 circuit pack (1), VoIP Handset (1), Vsu 7500 (1), WebLM (1), Wireless AP-6 (1), libsafe (1), one-X (3), one-X Communicator (1), pnremote (1)

Link to Vendor Website: https://www.avaya.com/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
17/01/20244.54.5Avaya Aura Experience Portal Manager divulgation de l'informationInconnueNot DefinedOfficial Fix0.000450.03CVE-2023-7031
20/07/20238.68.6Avaya Aura Device Services Web Application elévation de privilègesInconnueNot DefinedNot Defined0.001960.03CVE-2023-3722
19/07/20235.25.2Avaya Call Management System elévation de privilègesInconnueNot DefinedNot Defined0.000540.04CVE-2023-3527
31/05/20235.75.7Avaya IX Workforce Engagement RedirectInconnueNot DefinedNot Defined0.000460.00CVE-2023-32218
31/05/20235.45.4Avaya IX Workforce Engagement divulgation de l'informationInconnueNot DefinedNot Defined0.000490.02CVE-2023-31187
31/05/20235.35.3Avaya IX Workforce Engagement divulgation de l'informationInconnueNot DefinedNot Defined0.000460.02CVE-2023-31186
04/11/20227.37.3Avaya Scopia Pathfinder 10/Scopia Pathfinder 20 PTS Login Page elévation de privilègesInconnueNot DefinedNot Defined0.003420.00CVE-2022-38168
13/10/20227.07.0Avaya Aura Communication Manager elévation de privilègesInconnueNot DefinedNot Defined0.000430.02CVE-2022-2249
06/10/20226.26.2Avaya Aura Application Enablement Services elévation de privilègesInconnueNot DefinedNot Defined0.000420.00CVE-2022-2975
02/09/20228.38.1Avaya IP Office elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.02CVE-2021-25657
26/06/20215.05.0Avaya Aura Device Services elévation de privilègesInconnueNot DefinedNot Defined0.000420.00CVE-2021-25654
24/06/20215.55.3Avaya Aura Experience Portal System Service Menu RedirectInconnueNot DefinedOfficial Fix0.000780.00CVE-2021-25655
24/06/20214.14.1Avaya Aura Utility Services elévation de privilègesInconnueNot DefinedNot Defined0.000420.03CVE-2021-25651
24/06/20214.14.1Avaya Aura Utility Services elévation de privilègesInconnueNot DefinedNot Defined0.000420.03CVE-2021-25650
24/06/20212.72.7Avaya Aura Utility Services File Management divulgation de l'informationInconnueNot DefinedNot Defined0.000420.00CVE-2021-25649
24/06/20213.53.4Avaya Aura Experience Portal Web Management cross site scriptingInconnueNot DefinedOfficial Fix0.000540.00CVE-2021-25656
24/06/20216.46.4Avaya Aura Appliance Virtualization Platform Utilities elévation de privilègesVirtualization SoftwareNot DefinedNot Defined0.000420.00CVE-2021-25653
24/06/20212.32.3Avaya Aura Appliance Virtualization Platform Utilities File Management divulgation de l'informationVirtualization SoftwareNot DefinedNot Defined0.000420.00CVE-2021-25652
29/04/20216.36.0Avaya Equinox Conferencing XML External EntityInconnueNot DefinedOfficial Fix0.002510.00CVE-2020-7037
29/04/20217.37.0Avaya Equinox Conferencing Management elévation de privilègesInconnueNot DefinedOfficial Fix0.002830.00CVE-2020-7038
24/04/20216.36.0Avaya Callback Assist XML External EntityInconnueNot DefinedOfficial Fix0.001350.00CVE-2020-7036
24/04/20216.36.0Avaya Aura Orchestration Designer Web-based User Interface XML External EntityInconnueNot DefinedOfficial Fix0.001350.00CVE-2020-7035
24/04/20217.27.2Avaya Session Border Controller for Enterprise Message elévation de privilègesInconnueNot DefinedNot Defined0.001250.07CVE-2020-7034
13/11/20204.74.7Avaya WebLM Admin Interface XML External EntityInconnueNot DefinedNot Defined0.019630.03CVE-2020-7032
13/11/20204.44.3Avaya Equinox Conferencing Unified Portal Client cross site scriptingInconnueNot DefinedOfficial Fix0.000540.00CVE-2020-7033

80 plus d'entrées ne sont pas affichées

Do you know our Splunk app?

Download it now for free!