Avaya vulnerabilitiesNone on the known-exploited list.
Avaya has 136 published vulnerabilities across 165 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Communication Manager, with 16. If you run Avaya software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Avaya products have the most vulnerabilities?
Communication Manager leads with 16 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Avaya vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Avaya's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Avaya flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 85%CVE-2004-0493Medium
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow...
- 67%CVE-2004-1050Critical
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the...
- 64%CVE-2004-0212Critical
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long...
- 63%CVE-2012-3811Critical
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012...
- 57%CVE-2004-0842High
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS)...
- 55%CVE-2004-0594Medium
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a...
- 55%CVE-2007-1765Critical
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in...
- 49%CVE-2004-0841Medium
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in...
- 45%CVE-2004-0595Medium
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web...
All Avaya products we track.
107 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Communication Managercommunication_manager16 vulnerabilities18 versions
- Modular Messaging Message Storage Servermodular_messaging_message_storage_server15 vulnerabilities3 versions
- S8300s830011 vulnerabilities4 versions
- S8500s850011 vulnerabilities4 versions
- S8700s870011 vulnerabilities4 versions
- Aura Communication Manageraura_communication_manager10 vulnerabilities53 versions
- Converged Communications Serverconverged_communications_server10 vulnerabilities1 version
- Definity One Media Serverdefinity_one_media_server10 vulnerabilities7 versions
- S8100s810010 vulnerabilities7 versions
- Aura System Manageraura_system_manager9 vulnerabilities37 versions
- IP Officeip_office9 vulnerabilities11 versions
- Ip600 Media Serversip600_media_servers9 vulnerabilities7 versions
- SIP Enablement Servicessip_enablement_services8 vulnerabilities5 versions
- Intuity Audixintuity_audix7 vulnerabilities3 versions
- Aura Session Manageraura_session_manager6 vulnerabilities12 versions
- Aura System Platformaura_system_platform6 vulnerabilities2 versions
- Message Networkingmessage_networking6 vulnerabilities3 versions
- Messaging Storage Servermessaging_storage_server6 vulnerabilities5 versions
- Iqiq5 vulnerabilities3 versions
- 4602sw IP Phone4602sw_ip_phone4 vulnerabilities1 version
- Argent Officeargent_office4 vulnerabilities1 version
- Aura Application Enablement Servicesaura_application_enablement_services4 vulnerabilities25 versions
- Aura Experience Portalaura_experience_portal4 vulnerabilities16 versions
- Aura Presence Servicesaura_presence_services4 vulnerabilities3 versions
This directory lists the 107 Avaya products with at least one tracked version, of 165 in our catalogue.
Running Avaya? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
- Matched to
- Avaya on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 136 published vulnerabilities across 165 products and 484 versions from Avaya.
None of Avaya's vulnerabilities is on the list of flaws known to be exploited today.
Communication Manager, with 16 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Avaya products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.