Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_system_manager:10.2:*:*:*:*:*:*:*

part: a version: 10.2 update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura System Manager (59ab8c44-d860-59c6-b996-41ce768f341b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7480 vulnerable 2026-06-08 06:58:22.273557 Improper access control in Avaya Aura System Manager
MEDIUM (4.2)
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
Published: 2024-08-08T16:04:25.989Z
Updated: 2025-10-01T01:33:36.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7477 vulnerable 2026-06-08 06:58:22.269549 Avaya Aura System Manager SQL injection vulnerability
MEDIUM (6.5)
A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database.  Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
Published: 2024-08-08T16:02:43.125Z
Updated: 2024-08-09T18:21:58.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.