CVE-2021-25650 Avaya Aura Utility Services Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services...

CVE-2021-25650

CVE-2021-25650 affects Avaya Aura Utility Services (7.x). The connected sources describe a privilege escalation vulnerability that could allow a local user to execute specially crafted scripts with elevated privileges within Avaya Aura Utility Services. The exact root cause details, impacted file...

CVE-2021-25649

CVE-2021-25649 affects Avaya Aura Utility Services (directory and file management) across all 7.x releases. The vulnerability is an information disclosure allowing any local user to access system functionality and configuration information that should be privileged, with CVSS3.1: AV:L/AC:L/PR:L/U...

CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

PT-2021-16730 · Avaya · Avaya Aura Appliance Virtualization Platform Utilities

Name of the Vulnerable Software and Affected Versions: Avaya Aura Appliance Virtualization Platform Utilities AVPU versions 8.0.0.0 through 8.1.3.1 Description: An information disclosure issue was discovered in the directory and file management of AVPU, potentially allowing any local user to acce...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows any local user to access system features and configuration information that should only be available to...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows a local user to execute specially crafted scripts as a privileged user. It affects all 7.x versions...

PT-2021-16729 · Avaya · Avaya Aura Utility Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Utility Services versions 7.x Description: A privilege escalation issue was discovered that may allow a local user to escalate privileges. Recommendations: For Avaya Aura Utility Services versions 7.x, at the moment, there is no...

PT-2021-16727 · Avaya · Avaya Aura Utility Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Utility Services versions 7.x Description: An information disclosure issue was found in the directory and file management of Avaya Aura Utility Services. This issue may allow any local user to access system functionality and...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows local users to escalate privileges. It affects all 7.x versions...

PT-2021-16728 · Avaya · Avaya Aura Utility Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Utility Services versions 7.x Description: A privilege escalation issue was discovered in Avaya Aura Utility Services, potentially allowing a local user to execute specially crafted scripts as a privileged user. Recommendations: Fo...

Avaya Aura Experience Portal 跨站脚本漏洞

Avaya Aura Experience Portal is the next-generation Avaya Voice Portal from Avaya, Inc. that provides organizations with a single point of orchestration for all automated voice and multimedia applications and services. experience Portal supports SIP, IP, TDM or hybrid environments. It includes...

Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞

Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides functionality for the AVP platform, such as AVP alarm and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in the Avaya Aura Appliance...

Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞

Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides features for the AVP platform, such as AVP alert and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in Avaya Aura Appliance Virtualizatio...

Avaya Aura Experience Portal 输入验证错误漏洞

Avaya Aura Experience Portal is the next generation of Avaya Voice Portal from Avaya, Inc. providing organizations with a single point of orchestration for all automated voice and multimedia applications and services. experience Portal supports SIP, IP, TDM or hybrid environments. It includes...

Unspecified Vulnerability in Avaya Equinox Conferencing

Avaya Equinox Conferencing is a conferencing support software from Avaya, USA. The software is a universal solution that includes all Avaya soft clients with the convergence of Avaya Aura Conferencing and Scopia for cell phones, browsers, desktops and conference room systems. A security...

Unauthorized Access Vulnerability in Enterprise Device Manager

Avaya, formerly known as Lucent Technologies Enterprise Networking Division and headquartered in New Jersey, USA, officially became an independent, publicly traded company on October 1, 2000 ... An unauthorized access vulnerability exists in Enterprise Device Manager, which could be exploited by ...

CVE-2020-7037

An XML External Entities XXE vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya...

CVE-2020-7037

An XML External Entities XXE vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya...