CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7477

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.4%

CVSS Severity

CVSS v3 Score 6.5

References

https://download.avaya.com/css/public/documents/101091159

Products affected by CVE-2024-7477

Avaya » Aura System Manager » Version: 10.1

cpe:2.3:a:avaya:aura_system_manager:10.1
Avaya » Aura System Manager » Version: 10.1.0.1

cpe:2.3:a:avaya:aura_system_manager:10.1.0.1
Avaya » Aura System Manager » Version: 10.1.0.2

cpe:2.3:a:avaya:aura_system_manager:10.1.0.2
Avaya » Aura System Manager » Version: 10.1.2

cpe:2.3:a:avaya:aura_system_manager:10.1.2
Avaya » Aura System Manager » Version: 10.2

cpe:2.3:a:avaya:aura_system_manager:10.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7477

Products

Pricing

Contact Us