Aura Messaging
Approved changes feed: RSS · Atom
cpe:2.3:a:avaya:aura_messaging:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d) |
|---|---|
| Product | Aura Messaging (57a6c477-126f-52e4-b112-b3dcea93bb38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7029 |
vulnerable | 2026-06-08 05:27:11.750680 |
Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability
MEDIUM (6.4)
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged level of the authenticated user. Affected versions of Communication Manager are 7.0.x, 7.1.x prior to 7.1.3.5 and 8.0.x. Affected versions of Messaging are 7.0.x, 7.1 and 7.1 SP1.
Published: 2020-08-11T23:05:18.034Z
Updated: 2024-09-16T22:03:15.362Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.