What’s Vulnerable › Vulnerabilities
CVE-2024-7477: Avaya Aura System Manager SQL injection vulnerability
- Severity: medium (CVSS 6.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-08 · updated 2026-06-17
- Weakness: CWE-89
Description
A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.
Affected products
- Avaya Aura System Manager: from 10.1 through 10.1.2; 10.2
References
Get alerted when CVE-2024-7477 or the next vulnerability affects your stack