Avaya Aura Device Services vulnerabilities

2 vulnerabilities

Known vulnerabilities in Avaya Aura Device Services, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-25654avayaaura_device_services+1
EPSS score
0.78%
An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versions of Avaya Aura Device Services.9.8CVE-2023-3722avayaaura_device_services
EPSS score
3.86%
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier.