Avaya Vulnerabilities and Affected Products
Vulnerabilities associated with Avaya Aura Utility Services.
Products
Clear product- IP Office7 vulnerabilities
- Avaya Aura Utility Services3 vulnerabilities
- ip600_media_servers3 vulnerabilities
- IX Workforce Engagement3 vulnerabilities
- Aura System Manager2 vulnerabilities
- Avaya Aura Appliance Virtualization Platform Utilities2 vulnerabilities
- Avaya Aura Communication Manager2 vulnerabilities
- Avaya Call Management System2 vulnerabilities
- Avaya Spaces2 vulnerabilities
- Communication Manager2 vulnerabilities
- ip_office2 vulnerabilities
- Orchestration Designer2 vulnerabilities
- Aura Device Services1 vulnerability
- Aura Orchestration Designer1 vulnerability
- aura_device_services1 vulnerability
- aura_system_manager1 vulnerability
- aura_utility_services1 vulnerability
- Avaya Aura Application Enablement Services1 vulnerability
- Avaya Aura Conferencing1 vulnerability
- Avaya Aura Devices Services1 vulnerability
- Avaya Aura Messaging1 vulnerability
- Avaya Aura® System Platform1 vulnerability
- Avaya Control Manager1 vulnerability
- Avaya Equinox Conferencing1 vulnerability
- Avaya Experience Portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-25651HIGH | Avaya Aura Utility Services Privilege Escalation VulnerabilityA privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Services | CVSS8.0v3.1 | EPSS0.484% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-25650HIGH | Avaya Aura Utility Services Privilege Escalation VulnerabilityA privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services | CVSS7.7v3.1 | EPSS0.511% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-25649MEDIUM | Avaya Utility Services Sensitive Information Disclosure VulnerabilityAn information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services | CVSS4.9v3.1 | EPSS0.616% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |