Avaya Aura Application Enablement Services
productDEcpe:/a:avaya:aura_application_enablement_services:-
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
40critical196high352medium49low
updated 2026-10-26
01
vulnerabilities (640)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-44228US | critical10.0OT critical | KEV |
| CVE-2021-40438US | critical9.0OT critical | KEV |
| CVE-2021-3156US | high7.8OT critical | KEV |
| CVE-2020-1938US | critical9.8OT critical | KEV |
| CVE-2022-0995US | high7.8OT critical | KEV |
| CVE-2022-0492US | high7.8OT critical | KEV |
| CVE-2021-0920US | medium6.4OT critical | KEV |
| CVE-2021-45105US | medium5.9 | Exploit |
| CVE-2021-44832US | medium6.6 | Exploit |
| CVE-2017-5753US | medium5.6 | Exploit |
| CVE-2020-8617US | medium5.9 | Exploit |
| CVE-2016-6210US | medium5.9 | Exploit |
| CVE-2020-13935US | high7.5 | Exploit |
| CVE-2022-29885US | high7.5 | Exploit |
| CVE-2022-0435US | high8.8 | Exploit |
| CVE-2018-5740US | high7.5 | Exploit |
| CVE-2021-23017US | high7.7 | Exploit |
| CVE-2018-18065US | medium6.5 | Exploit |
| CVE-2024-21733US | medium5.3 | Exploit |
| CVE-2021-42574US | high8.3 | Exploit |
| CVE-2020-12351US | high8.8 | Exploit |
| CVE-2018-5333US | medium5.5 | Exploit |
| CVE-2020-15802US | medium5.9 | Exploit |
| CVE-2020-25705US | high7.4OT elevated | Exploit |
| CVE-2020-12352US | medium6.5 | Exploit |
| CVE-2020-25686US | low3.7OT elevated | Exploit |
| CVE-2021-42694US | high8.3 | Exploit |
| CVE-2021-38185US | high7.8 | Exploit |
| CVE-2020-2655US | medium4.8 | Exploit |
| CVE-2021-41617US | high7.0OT elevated | Exploit |
| CVE-2020-24490US | medium6.5 | Exploit |
| CVE-2020-10713US | high8.2 | Exploit |
| CVE-2021-3975US | medium6.5 | Exploit |
| CVE-2020-0458US | high7.8 | Exploit |
| CVE-2020-0463US | high7.5 | Exploit |
| CVE-2018-1000199US | medium5.5 | Exploit |
| CVE-2022-1011US | high7.8 | Exploit |
| CVE-2019-11599US | high7.0 | Exploit |
| CVE-2018-5803US | medium5.5 | Exploit |
| CVE-2020-8694US | medium5.5 | Exploit |
| CVE-2020-11179US | high7.0 | Exploit |
| CVE-2020-25687US | medium5.9 | — |
| CVE-2020-25683US | medium5.9 | — |
| CVE-2020-25681US | high8.1 | — |
| CVE-2018-5712US | medium6.1 | — |
| CVE-2020-25682US | high8.1 | — |
| CVE-2020-13934US | high7.5 | — |
| CVE-2021-36160US | high7.5 | — |
| CVE-2017-18017US | critical9.8 | — |
| CVE-2018-8034US | high7.5 | — |
showing 50 of 640
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-400Uncontrolled Resource Consumption86 CVEs
- CWE-401Missing Release of Memory after Effective Lifetime79 CVEs
- CWE-787Out-of-bounds Write68 CVEs
- CWE-125Out-of-bounds Read62 CVEs
- CWE-264CWE-26462 CVEs
- CWE-20Improper Input Validation61 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer38 CVEs
- CWE-476NULL Pointer Dereference37 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)640 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan