VYPR
← All advisories
High severity7.7NVD Advisory· Published Oct 6, 2022· Updated Jun 17, 2026

CVE-2022-2975

CVE-2022-2975

Description

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0 through 8.1.3.4 and 10.1.0.0 through 10.1.0.1. Versions prior to 8.0.0.0 are end of manufacturing support and were not evaluated.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Avaya/Aura Application Enablement Services3 versions
    cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:avaya:aura_application_enablement_services:*:*:*:*:*:*:*:*range: >=8.0.0.0,<8.1.3.5
    • (no CPE)range: 8.0.0.0 through 8.1.3.4 and 10.1.0.0 through 10.1.0.1
    • (no CPE)range: 10.1.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.