Avaya Call Management System vulnerabilities

3 vulnerabilities

Known vulnerabilities in Avaya Call Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2016-5285avayaaura_application_enablement_services+29
EPSS score
2.28%
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.9.9CVE-2025-1041avayaavaya call management system+1
EPSS score
0.44%
An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.6.8CVE-2023-3527avayaavaya call management system+1
EPSS score
0.57%
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a spreadsheet software such as Microsoft Excel.