Avaya Aura Appliance Virtualization Platform vulnerabilities

2 CVEs affecting Avaya Aura Appliance Virtualization Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-25653, published 2021-06-24.

More from Avaya.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-25652, published 2021-06-24. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow…
• CVE-2021-25653, published 2021-06-24. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges. Affects 8.0.0.0…