Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_utility_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura Utility Services (ffe27eee-2e7b-5e1c-bf92-d212066011c6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25651 vulnerable 2026-06-08 05:30:41.157718 Avaya Aura Utility Services Privilege Escalation Vulnerability
HIGH (8)
A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Services
Published: 2021-06-24T08:55:26.000Z
Updated: 2024-08-03T20:11:27.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25650 vulnerable 2026-06-08 05:30:41.157285 Avaya Aura Utility Services Privilege Escalation Vulnerability
HIGH (7.7)
A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services
Published: 2021-06-24T08:55:25.000Z
Updated: 2024-08-03T20:11:27.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25649 vulnerable 2026-06-08 05:30:41.155774 Avaya Utility Services Sensitive Information Disclosure Vulnerability
MEDIUM (4.9)
An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services
Published: 2021-06-24T08:55:23.000Z
Updated: 2024-08-03T20:11:27.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5285 vulnerable 2026-06-08 05:07:56.637193 Details available
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Published: 2019-11-15T15:44:05.000Z
Updated: 2024-08-06T00:53:48.923Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.