Avaya güvenlik açıkları (CVE)

Avaya için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç

10.0Kritik

CVE-2025-34067 1 yıl önce

Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

Hikvision Integrated Security Management Platform

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserial…

22%EPSS

5.3Orta

CVE-2025-49186 1 yıl önce

No brute-force protection

SICK AG Field Analytics; SICK AG Baggage Analytics; SICK AG Tire Analytics; SICK AG Package Analytics

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.

9.9Kritik

CVE-2025-1041 1 yıl önce

Avaya Call Management System RCE vulnerability

Avaya Avaya Call Management System

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.

7.3Yüksek

CVE-2024-12756 1 yıl önce

Avaya Spaces HTML injection (HTMLi) Vulnerability

Avaya Avaya Spaces

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of the page content seen by the user.

7.9Yüksek

CVE-2024-12755 1 yıl önce

Avaya Spaces XSS Vulnerability

Avaya Avaya Spaces

A Cross-Site Scripting (XSS) vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential disclose of sensitive information.