Avaya Call Management System vulnerabilities
3 known vulnerabilities affecting avaya/call_management_system.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2025-1041P2CRITICALCVSS 9.8≥ 18.0.0.1, < 19.2.0.7≥ 20.0, < 20.0.1.02025-06-10
CVE-2025-1041 [CRITICAL] CWE-20 CVE-2025-1041: An improper input validation discovered in Avaya Call Management System could allow an unauthorize
An improper input validation discovered in
Avaya Call Management System
could allow an unauthorized
remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.
nvd
CVE-2016-5285P3HIGHCVSS 7.5≥ 18.0.0.1, ≤ 18.0.0.2v17.02019-11-15
CVE-2016-5285 [HIGH] CWE-476 CVE-2016-5285: A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missin
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
nvd
CVE-2023-3527P4MEDIUMCVSS 6.8fixed in 20.0.0.02023-07-18
CVE-2023-3527 [MEDIUM] CWE-1236 CVE-2023-3527: A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web app
A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges to input crafted data which, when exported to a CSV file, may attempt arbitrary command execution on the system used to open the file by a spreadsheet software
such as Microsoft Excel.
nvd