Information disclosure

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities AVPU. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be...

CVE-2021-25656

CVE-2021-25656 refers to stored XSS vulnerabilities in the Avaya Aura Experience Portal Web management interface. The issue is exploitable by an authenticated user and could disclose sensitive information. Affected versions are 7.0–7.2.3 (without hotfix) and 8.0.0 (without hotfix). The available ...

CVE-2021-25655

CVE-2021-25655 affects Avaya Aura Experience Portal, specifically the System Service Menu component, enabling URL redirection to untrusted sites via a crafted input. Affected versions: 7.0–7.2.3 (without hotfix) and 8.0.0 (without hotfix). The connected documents describe an input-validation/redi...

CVE-2021-25655 URL redirection to untrusted site possible in Avaya Aura Experience Portal

A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 without hotfix and 8.0.0 without hotfix...

CVE-2021-25653

CVE-2021-25653 is an AVPU privilege escalation in Avaya Aura Appliance Virtualization Platform Utilities. Affected from 8.0.0.0 to 8.1.3.1. The vulnerability is described as local with low attack complexity and no authentication, leading to high impact on confidentiality, integrity, and availabil...

CVE-2021-25653 Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities AVPU that may potentially allow a local user to escalate privileges. Affects 8.0.0.0 through 8.1.3.1 versions of AVPU...

CVE-2021-25652

CVE-2021-25652 affects Avaya Aura Appliance Virtualization Platform Utilities (AVPU). The vulnerability is an information-disclosure issue in the directory and file management that could allow any local user to access system functionality and configuration information intended for privileged user...

CVE-2021-25651

CVE-2021-25651 affects Avaya Aura Utility Services (all 7.x versions). The connected documents confirm a local privilege-escalation vulnerability in this software, with the root cause described only as a privilege escalation issue and no publicly available mitigation/fix details in the provided s...

CVE-2021-25651 Avaya Aura Utility Services Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Services...

CVE-2021-25650 Avaya Aura Utility Services Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services...

CVE-2021-25650

CVE-2021-25650 affects Avaya Aura Utility Services (7.x). The connected sources describe a privilege escalation vulnerability that could allow a local user to execute specially crafted scripts with elevated privileges within Avaya Aura Utility Services. The exact root cause details, impacted file...

CVE-2021-25650 Avaya Aura Utility Services Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services...

CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

CVE-2021-25649

CVE-2021-25649 affects Avaya Aura Utility Services (directory and file management) across all 7.x releases. The vulnerability is an information disclosure allowing any local user to access system functionality and configuration information that should be privileged, with CVSS3.1: AV:L/AC:L/PR:L/U...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows any local user to access system features and configuration information that should only be available to...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows local users to escalate privileges. It affects all 7.x versions...

Avaya Aura Utility Services 安全漏洞

Avaya Aura Utility Services is a group of tools and applications that support enterprise IP telephony from Avaya USA. A security vulnerability exists in Avaya Aura Utility Services that allows a local user to execute specially crafted scripts as a privileged user. It affects all 7.x versions...

PT-2021-16728 · Avaya · Avaya Aura Utility Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Utility Services versions 7.x Description: A privilege escalation issue was discovered in Avaya Aura Utility Services, potentially allowing a local user to execute specially crafted scripts as a privileged user. Recommendations: Fo...

Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞

Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides features for the AVP platform, such as AVP alert and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in Avaya Aura Appliance Virtualizatio...

PT-2021-16727 · Avaya · Avaya Aura Utility Services

Name of the Vulnerable Software and Affected Versions: Avaya Aura Utility Services versions 7.x Description: An information disclosure issue was found in the directory and file management of Avaya Aura Utility Services. This issue may allow any local user to access system functionality and...