Vulnerabilities > Avaya > Aura System Manager > 10.1.0.2

DATE CVE VULNERABILITY TITLE RISK
2024-08-08 CVE-2024-7477 SQL Injection vulnerability in Avaya Aura System Manager
A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database.  Affected versions include 10.1.x.x and 10.2.x.x.
local
low complexity
avaya CWE-89
6.7
2024-08-08 CVE-2024-7480 Unspecified vulnerability in Avaya Aura System Manager
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface (CLI) user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x.
local
low complexity
avaya
4.4