Description

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database.  Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

INFO

Published Date :

2024-08-08T16:02:43.125Z

Last Modified :

2024-08-09T18:21:58.052Z

Source :

avaya
AFFECTED PRODUCTS

The following products are affected by CVE-2024-7477 vulnerability.

Vendors Products
Avaya
  • Aura System Manager
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-7477.

URL Resource
https://download.avaya.com/css/public/documents/101091159 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact