Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how avaya compares to other vendors in security performance

View Risk Score →

Software

avaya modular messaging message storage server
18
avaya s8300
14
avaya aura communication manager
13
avaya communication manager
13
avaya s8500
12
avaya s8700
12
avaya converged communications server
10
avaya definity one media server
10
avaya ip office
10
avaya s8100
10
avaya aura sip enablement services
9
avaya ip600 media servers
9
avaya aura system manager
8
avaya aura system platform
7
avaya intuity audix
7
avaya aura session manager
6
avaya message networking
6
avaya s3400
6
avaya iq
5
avaya 4602sw ip phone
4
avaya argent office
4
avaya aura application enablement services
4
avaya aura conferencing standard edition
4
avaya aura experience portal
4
avaya aura presence services
4
avaya aura utility services
4
avaya intuity audix lx
4
avaya messaging storage server
4
avaya mn100
4
avaya one-x
4
avaya cvlan
3
avaya equinox conferencing
3
avaya integrated management
3
avaya ip soft phone
3
avaya ix workforce engagement
3
avaya libsafe
3
avaya meeting exchange
3
avaya network routing
3
avaya s8710
3
avaya sg200
3
avaya sg203
3
avaya sg208
3
avaya sg5
3
avaya voice portal
3
avaya vsu
3
avaya aura appliance virtualization platform
2
avaya aura application server 5300
2
avaya aura device services
2
avaya aura messaging
2
avaya aura voice portal
2

Avaya Media ServerNo brute-force protection

Risk 28
Severity
6.5
EPSS
0.06%
First published (updated )
CVE-2025-49186

Avaya Call Management SystemAvaya Call Management System RCE vulnerability

Risk 82
Severity
9.9
First published (updated )
CVE-2025-1041

Avaya SpacesAvaya Spaces HTML injection (HTMLi) Vulnerability

Risk 49
Severity
7.3
First published (updated )
CVE-2024-12756

Avaya SpacesAvaya Spaces XSS Vulnerability

Risk 63
Severity
7.9
First published (updated )
CVE-2024-12755

Avaya Aura System ManagerImproper access control in Avaya Aura System Manager

Risk 20
Severity
4.4
EPSS
0.04%
First published (updated )
CVE-2024-7480
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Avaya Aura System ManagerAvaya Aura System Manager SQL injection vulnerability

Risk 46
Severity
6.7
EPSS
0.04%
First published (updated )
CVE-2024-7477

Avaya IP Office One-XAvaya IP Office One-X Portal File Upload Vulnerability

Risk 82
Severity
9.9
First published (updated )
CVE-2024-4197

Avaya IP OfficeAvaya IP Office Web Control RCE Vulnerability

Risk 87
Severity
10
First published (updated )
CVE-2024-4196

Avaya Aura Experience PortalAvaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities

Risk 24
Severity
5.7
EPSS
0.04%
First published (updated )
CVE-2023-7031

Avaya Aura Device ServicesAvaya Aura Device Services Remote Code Execution

Risk 86
Severity
9.8
First published (updated )
CVE-2023-3722
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Avaya Call Management SystemAvaya Call Management System CSV injection vulnerability

Risk 61
Severity
6.8
First published (updated )
CVE-2023-3527

Avaya IX Workforce EngagementAvaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy

Risk 27
Severity
5.3
First published (updated )
CVE-2023-31186

Avaya IX Workforce EngagementAvaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials

Risk 38
Severity
6.5
First published (updated )
CVE-2023-31187

Avaya IX Workforce EngagementAvaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Risk 38
Severity
6.1
First published (updated )
CVE-2023-32218

Avaya Scopia Pathfinder 10 Pts FirmwareBroken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.…

Risk 66
Severity
9.1
First published (updated )
CVE-2022-38168
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Avaya Aura Communication ManagerAvaya Aura Communication Manager Privilege Escalation Vulnerabilities

Risk 60
Severity
7.7
First published (updated )
CVE-2022-2249

Avaya Aura Application Enablement ServicesAvaya Aura Application Enablement Services weak permissions in web application

Risk 60
Severity
7.7
First published (updated )
CVE-2022-2975

Avaya IP OfficeAvaya IP Office Privilege Escalation Vulnerability

Risk 69
Severity
7.8
First published (updated )
CVE-2021-25657

Avaya Aura Device ServicesAvaya Aura Device Services Arbitrary Code Execution Vulnerability

Risk 69
Severity
7.8
First published (updated )
CVE-2021-25654

Avaya Aura Experience PortalAvaya Aura Experience Portal XSS vulnerabilities

Risk 34
Severity
5.4
First published (updated )
CVE-2021-25656
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Avaya Aura Experience PortalURL redirection to untrusted site possible in Avaya Aura Experience Portal

Risk 38
Severity
6.1
First published (updated )
CVE-2021-25655

Avaya Aura Appliance Virtualization PlatformAvaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability

Risk 65
Severity
8
First published (updated )
CVE-2021-25653

Avaya Aura Appliance Virtualization PlatformAvaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability

Risk 32
Severity
5.5
First published (updated )
CVE-2021-25652

Avaya Aura Utility ServicesAvaya Aura Utility Services Privilege Escalation Vulnerability

Risk 65
Severity
8
First published (updated )
CVE-2021-25651

Avaya Aura Utility ServicesAvaya Aura Utility Services Privilege Escalation Vulnerability

Risk 72
Severity
8.8
First published (updated )
CVE-2021-25650
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Avaya Aura Utility ServicesAvaya Utility Services Sensitive Information Disclosure Vulnerability

Risk 32
Severity
5.5
First published (updated )
CVE-2021-25649

Avaya Equinox ConferencingAvaya Meetings Server Information Disclosure vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2020-7038

Avaya Equinox ConferencingAvaya Equinox Conferencing XXE vulnerability

Risk 60
Severity
8.1
First published (updated )
CVE-2020-7037

Avaya Callback AssistXXE in Avaya Callback Assist Administration

Risk 60
Severity
8.1
First published (updated )
CVE-2020-7036

Avaya Aura Orchestration DesignerXXE in Avaya Aura Orchestration Designer

Risk 60
Severity
8.1
First published (updated )
CVE-2020-7035
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203