CVE-2022-2249

6.7 mediumEPSS 0.2%

Medium (6.7) in avaya aura communication manager. EPSS 0.2% chance of exploitation in the next 30 days.

Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allow local administrative users to escalate their privileges. This issue affects Communication Manager versions 8.0.0.0 through 8.1.3.3 and 10.1.0.0.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2022-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_communication_manager

References

https://download.avaya.com/css/public/documents/101083760
https://download.avaya.com/css/public/documents/101083760

Check your stack JSON