What’s Vulnerable › Vulnerabilities

CVE-2021-25649: Avaya Utility Services Sensitive Information Disclosure Vulnerability

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-24 · updated 2026-06-17
• Weakness: CWE-200

Description

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services

Affected products

• Avaya Aura Utility Services: from 7.0 through 7.1.3

References

• https://support.avaya.com/css/P8/documents/101072728
• https://support.avaya.com/css/P8/documents/101072728

Get alerted when CVE-2021-25649 or the next vulnerability affects your stack