Avaya Aura Utility Services vulnerabilities

4 CVEs affecting Avaya Aura Utility Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-25651, published 2021-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5285, published 2019-11-15. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote…
CVE-2021-25649, published 2021-06-24. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system…
CVE-2021-25650, published 2021-06-24. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x…
CVE-2021-25651, published 2021-06-24. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility…