GCVE - cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_system_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Avaya (`79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d`)
Product	Aura System Manager (`59ab8c44-d860-59c6-b996-41ce768f341b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7480`	vulnerable	2026-06-08 06:58:22.273511	Improper access control in Avaya Aura System Manager MEDIUM (4.2) An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support. Published: 2024-08-08T16:04:25.989Z Updated: 2025-10-01T01:33:36.494Z Open on db.gcve.eu Reference links https://download.avaya.com/css/public/documents/101091159	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7477`	vulnerable	2026-06-08 06:58:22.268626	Avaya Aura System Manager SQL injection vulnerability MEDIUM (6.5) A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support. Published: 2024-08-08T16:02:43.125Z Updated: 2024-08-09T18:21:58.052Z Open on db.gcve.eu Reference links https://download.avaya.com/css/public/documents/101091159	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7032`	vulnerable	2026-06-08 05:27:11.773204	Avaya WebLM Improper Restriction of XML External Entity Reference MEDIUM (6.5) An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2. Published: 2020-11-13T00:20:14.764Z Updated: 2024-09-17T01:45:48.139Z Open on db.gcve.eu Reference links https://downloads.avaya.com/css/P8/documents/101072249 http://seclists.org/fulldisclosure/2020/Nov/31 http://packetstormsecurity.com/files/160123/Avaya-Web-License-Manager-XML-Injection.html https://sec-consult.com/vulnerability-lab/advisory/blind-out-of-band-xml-external-entity-injection-in-avaya-web-license-manager/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5285`	vulnerable	2026-06-08 05:07:56.636686	Details available A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service. Published: 2019-11-15T15:44:05.000Z Updated: 2024-08-06T00:53:48.923Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html http://www.securityfocus.com/bid/94349 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html https://security.gentoo.org/glsa/201701-46 http://rhn.redhat.com/errata/RHSA-2016-2779.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.