CVE-2019-7003criticalCWE-89

CVE-2019-7003: fallo crítico en Avaya Control Manager

ACM SQL Injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Avaya Control Manager

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 1.5%
A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions prior to 8.0.4.0. Unsupported versions not listed here were not evaluated.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Productos afectados
Avaya · Avaya Control Manager