Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-3722 | 1 Avaya | 1 Aura Device Services | 2024-11-21 | N/A | 8.6 HIGH |
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. | |||||
CVE-2021-25654 | 1 Avaya | 1 Aura Device Services | 2024-11-21 | 4.6 MEDIUM | 6.2 MEDIUM |
An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services. |