PatchTheCVEaura system manager vulnerabilities and fixes
Recent CVEs affecting aura system manager, with upgrade or downgrade steps. 2 tracked.
Also searched as: aurasystemmanager.
aura system manager has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-08. Highest priority: CVE-2024-7477 (score 25/100).
- CVE-2024-7480 MEDIUM 4.2 UPGRADE An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-li
- CVE-2024-7477 MEDIUM 6.5 UPGRADE A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrat
FAQ
How do I fix aura system manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aura system manager being exploited right now?
None of the tracked aura system manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aura system manager CVE should I patch first?
CVE-2024-7477 currently ranks highest (25/100): A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrat.