CVE-2024-7477

6.7 mediumEPSS 0.2%

Medium (6.7) in avaya aura system manager. EPSS 0.2% chance of exploitation in the next 30 days.

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer support.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avaya:aura_system_manager

References

https://download.avaya.com/css/public/documents/101091159

Check your stack JSON