Avaya vulnerabilities

CVEs per yearBy the year they were published

1. 20186
2. 20196
3. 20206
4. 202113
5. 20223
6. 20235
7. 20245
8. 20253

Newest CVEs

• CVE-2025-1041

  Avaya Call Management System RCE vulnerability

  Avaya · Avaya Call Management System

  Critical9.9
• CVE-2024-12756

  Avaya Spaces HTML injection (HTMLi) Vulnerability

  Avaya · Avaya Spaces

  High7.3
• CVE-2024-12755

  Avaya Spaces XSS Vulnerability

  Avaya · Avaya Spaces

  High7.9
• CVE-2024-7480

  Improper access control in Avaya Aura System Manager

  Avaya · Aura System Manager

  Medium4.2
• CVE-2024-7477

  Avaya Aura System Manager SQL injection vulnerability

  Avaya · Aura System Manager

  Medium6.5
• CVE-2024-4197

  Avaya IP Office One-X Portal File Upload Vulnerability

  Avaya · IP Office

  Critical9.9
• CVE-2024-4196

  Avaya IP Office Web Control RCE Vulnerability

  Avaya · IP Office

  Critical10.0
• CVE-2023-7031

  Avaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities

  Avaya · Experience Portal Manager

  Medium5.7
• CVE-2023-3722

  Avaya Aura Device Services Remote Code Execution

  Avaya · Aura Device Services

  High8.6
• CVE-2023-3527

  Avaya Call Management System CSV injection vulnerability

  Avaya · Avaya Call Management System

  Medium6.8