Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-7477

Avaya Aura System Manager SQL injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
avaya

Description

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database.  Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avaya Aura System Manager

Default version status: unaffected

  • 10.1.x.xaffected
  • 10.2.x.xaffected

References