Avaya Vulnerabilities and Affected Products
Vulnerabilities associated with Avaya Aura Appliance Virtualization Platform Utilities.
Products
Clear product- IP Office7 vulnerabilities
- Avaya Aura Utility Services3 vulnerabilities
- ip600_media_servers3 vulnerabilities
- IX Workforce Engagement3 vulnerabilities
- Aura System Manager2 vulnerabilities
- Avaya Aura Appliance Virtualization Platform Utilities2 vulnerabilities
- Avaya Aura Communication Manager2 vulnerabilities
- Avaya Call Management System2 vulnerabilities
- Avaya Spaces2 vulnerabilities
- Communication Manager2 vulnerabilities
- ip_office2 vulnerabilities
- Orchestration Designer2 vulnerabilities
- Aura Device Services1 vulnerability
- Aura Orchestration Designer1 vulnerability
- aura_device_services1 vulnerability
- aura_system_manager1 vulnerability
- aura_utility_services1 vulnerability
- Avaya Aura Application Enablement Services1 vulnerability
- Avaya Aura Conferencing1 vulnerability
- Avaya Aura Devices Services1 vulnerability
- Avaya Aura Messaging1 vulnerability
- Avaya Aura® System Platform1 vulnerability
- Avaya Control Manager1 vulnerability
- Avaya Equinox Conferencing1 vulnerability
- Avaya Experience Portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-25653HIGH | Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation VulnerabilityA privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges. Affects 8.0.0.0 through 8.1.3.1 versions of AVPU. | CVSS8.0v3.1 | EPSS0.639% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-25652MEDIUM | Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure VulnerabilityAn information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects versions 8.0.0.0 through 8.1.3.1 of AVPU. | CVSS4.9v3.1 | EPSS0.698% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |