Critical severity10.0NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-7003
CVE-2019-7003
Description
A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions prior to 8.0.4.0. Unsupported versions not listed here were not evaluated.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Avaya/Avaya Control Managerv5Range: 8.0.x prior to 8.0.4.0
<8.0.4.0+ 1 more
- (no CPE)range: <8.0.4.0
- cpe:2.3:a:avaya:control_manager:*:*:*:*:*:*:*:*range: >=7.0,<8.0.4.0
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/109134nvdBroken LinkThird Party AdvisoryVDB Entry
- downloads.avaya.com/css/P8/documents/101059368nvdVendor Advisory
- support.avaya.com/documents/documents-by-contenttype.actionnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.