Aura Application Enablement Services

aura_application_enablement_services

Vendor: Avaya • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-2975 1Avaya 1Aura Application Enablement Services Nov 21, 2024 Oct 6, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the roo...Show more A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0 through 8.1.3.4 and 10.1.0.0 through 10.1.0.1. Versions prior to 8.0.0.0 are end of manufacturing support and were not evaluated.Show less
CVE-2016-5285 5Avaya DebianMozilla+2 more 27Aura Application Enablement Services Aura Application Server 5300Aura Communication Manager+24 more Nov 21, 2024 Nov 15, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a...Show more A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.Show less
CVE-2009-3939 7Avaya CanonicalDebian+4 more 18Aura Application Enablement Services Aura Communication ManagerAura Session Manager+15 more Apr 23, 2026 Nov 16, 2009 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
CVE-2006-1058 2Avaya Busybox 5Aura Application Enablement Services Aura Sip Enablement ServicesBusybox+2 more Apr 16, 2026 Apr 4, 2006 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.