vciy

CVEs we hold for Avaya

Records whose assigning authority named Avaya as the affected vendor. Newest identifiers first, capped at 200.

CVE-2025-1041Avaya Call Management System RCE vulnerabilityAvaya Call Management System
CVE-2024-7480Improper access control in Avaya Aura System ManagerAvaya Aura System Manager
CVE-2024-7477Avaya Aura System Manager SQL injection vulnerabilityAvaya Aura System Manager
CVE-2024-4197Avaya IP Office One-X Portal File Upload VulnerabilityAvaya IP Office
CVE-2024-4196Avaya IP Office Web Control RCE VulnerabilityAvaya IP Office
CVE-2024-12756Avaya Spaces HTML injection (HTMLi) VulnerabilityAvaya Spaces
CVE-2024-12755Avaya Spaces XSS VulnerabilityAvaya Spaces
CVE-2023-7031Avaya Experience Portal Manager Insecure Direct Object Reference VulnerabilitiesAvaya Experience Portal Manager
CVE-2023-3722Avaya Aura Device Services Remote Code ExecutionAvaya Aura Device Services
CVE-2023-3527Avaya Call Management System CSV injection vulnerabilityAvaya Call Management System
CVE-2023-32218Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')Avaya IX Workforce Engagement
CVE-2023-31187Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected CredentialsAvaya IX Workforce Engagement
CVE-2023-31186Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response DiscrepancyAvaya IX Workforce Engagement
CVE-2022-2975Avaya Aura Application Enablement Services weak permissions in web applicationAvaya Aura Application Enablement Services
CVE-2022-2249Avaya Aura Communication Manager Privilege Escalation VulnerabilitiesAvaya Aura Communication Manager
CVE-2021-25657Avaya IP Office Privilege Escalation VulnerabilityAvaya IP Office
CVE-2021-25656Avaya Aura Experience Portal XSS vulnerabilitiesAvaya Product
CVE-2021-25655URL redirection to untrusted site possible in Avaya Aura Experience PortalAvaya Experience Portal
CVE-2021-25654Avaya Aura Device Services Arbitrary Code Execution VulnerabilityAvaya Aura Devices Services
CVE-2021-25653Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation VulnerabilityAvaya Aura Appliance Virtualization Platform Utilities
CVE-2021-25652Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure VulnerabilityAvaya Aura Appliance Virtualization Platform Utilities
CVE-2021-25651Avaya Aura Utility Services Privilege Escalation VulnerabilityAvaya Aura Utility Services
CVE-2021-25650Avaya Aura Utility Services Privilege Escalation VulnerabilityAvaya Aura Utility Services
CVE-2021-25649Avaya Utility Services Sensitive Information Disclosure VulnerabilityAvaya Aura Utility Services
CVE-2020-7038Avaya Meetings Server Information Disclosure vulnerabilityAvaya Meetings Management
CVE-2020-7037Avaya Equinox Conferencing XXE vulnerabilityAvaya Meetings Server
CVE-2020-7036XXE in Avaya Callback Assist AdministrationAvaya Callback Assist
CVE-2020-7035XXE in Avaya Aura Orchestration DesignerAvaya Aura Orchestration Designer
CVE-2020-7034Command injection in Avaya Session Border Controller for EnterpriseAvaya Session Border Controller for Enterprise
CVE-2020-7033Avaya Equinox Conferencing XSSAvaya Equinox Conferencing
CVE-2020-7032Avaya WebLM Improper Restriction of XML External Entity ReferenceAvaya System Manager
CVE-2020-7030IPO Information DisclosureAvaya IP Office
CVE-2020-7029Avaya Product System Management Interface Cross-Site Request Forgery VulnerabilityAvaya Aura Messaging
CVE-2019-7007Avaya Equinox Conferencing Management (iView) Directory Traversal VulnerabilityAvaya Equinox Conferencing Management (iView)
CVE-2019-7005Unauthenticated Information Disclosure Vulnerability in IP OfficeAvaya IP Office
CVE-2019-7004Avaya IP Office XSS VulnerabilityAvaya IP Office Application Server
CVE-2019-7003ACM SQL InjectionAvaya Control Manager
CVE-2019-7001Avaya IPOCC WebUI SQL InjectionAvaya IP Office Contact Center
CVE-2019-7000Avaya Aura Conferencing XSSAvaya Aura Conferencing
CVE-2018-15617Communication Manager Denial of ServiceAvaya Communication Manager
CVE-2018-15616System Platform Web UI DeserializationAvaya Aura® System Platform
CVE-2018-15615CMS Supervisor Information DisclosureAvaya Call Management System Supervisor
CVE-2018-15614IP Office one-X Portal XSSAvaya IP Office
CVE-2018-15613Orchestration Designer Runtime Config XSSAvaya Orchestration Designer
CVE-2018-15612Orchestration Designer Runtime Config CSRFAvaya Orchestration Designer
CVE-2018-15611Communication Manager Local Administrator PrivEscAvaya Communication Manager
CVE-2018-15610Improper access controls in IP Office one-X PortalAvaya IP Office

47 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.