Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:aura_device_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d)
ProductAura Device Services (684e0248-1a19-50f5-97f7-13d207c46fc3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3722 vulnerable 2026-06-08 06:09:40.343770 Avaya Aura Device Services Remote Code Execution
HIGH (8.6)
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.
Published: 2023-07-19T19:56:52.681Z
Updated: 2024-10-22T19:17:58.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25654 vulnerable 2026-06-08 05:30:41.162928 Avaya Aura Device Services Arbitrary Code Execution Vulnerability
MEDIUM (6.2)
An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services.
Published: 2021-06-25T20:15:12.000Z
Updated: 2024-08-03T20:11:28.332Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.