Avaya CMS

productDE

cpe:/a:avaya:call_management_system_server:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical19high52medium9low

updated 2026-10-27

vulnerabilities (82)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	—
CVE-2020-8617US	medium5.9	93.4% (100th)	Exploit	no fix	2020-05-19	—
CVE-2018-5740US	high7.5	59.6% (99th)	Exploit	no fix	2019-01-16	—
CVE-2018-18065US	medium6.5	17.5% (97th)	Exploit	no fix	2018-10-08	—
CVE-2024-21733US	medium5.3	14.3% (97th)	Exploit	no fix	2024-01-19	—
CVE-2020-2655US	medium4.8	3.61% (89th)	Exploit	no fix	2020-01-15	—
CVE-2020-8694US	medium5.5	0.45% (39th)	Exploit	no fix	2020-11-12	—
CVE-2018-8034US	high7.5	21.0% (98th)	—	no fix	2018-08-01	—
CVE-2018-1336US	high7.5	20.4% (97th)	—	no fix	2018-08-02	—
CVE-2019-15604US	high7.5	20.0% (97th)	—	no fix	2020-02-07	—
CVE-2020-8616US	high8.6	11.0% (96th)	—	no fix	2020-05-19	—
CVE-2019-17563US	high7.5	10.7% (96th)	—	no fix	2019-12-23	—
CVE-2020-1935US	medium4.8	9.39% (95th)	—	no fix	2020-02-24	—
CVE-2019-17569US	medium4.8	8.87% (95th)	—	no fix	2020-02-24	—
CVE-2021-30639US	high7.5	6.89% (94th)	—	no fix	2021-07-12	—
CVE-2021-29921US	critical9.8	6.88% (94th)	—	no fix	2021-05-06	—
CVE-2019-13117US	medium5.3	6.46% (94th)	—	no fix	2019-07-01	—
CVE-2020-14562US	medium5.0	5.17% (92nd)	—	no fix	2020-07-15	—
CVE-2019-13118US	medium5.3	5.15% (92nd)	—	no fix	2019-07-01	—
CVE-2020-2604US	high8.1	4.88% (92nd)	—	no fix	2020-01-15	—
CVE-2020-10995US	high7.5	4.48% (91st)	—	no fix	2020-05-19	—
CVE-2020-14621US	medium5.0	4.47% (91st)	—	no fix	2020-07-15	—
CVE-2019-2769US	medium5.3	4.35% (91st)	—	no fix	2019-07-23	—
CVE-2019-2762US	medium5.3	4.35% (91st)	—	no fix	2019-07-23	—
CVE-2021-20277US	high7.5	4.33% (91st)	—	no fix	2021-05-12	—
CVE-2020-14579US	medium4.3	4.31% (91st)	—	no fix	2020-07-15	—
CVE-2020-14578US	medium4.3	4.31% (91st)	—	no fix	2020-07-15	—
CVE-2020-2601US	medium6.8	4.30% (91st)	—	no fix	2020-01-15	—
CVE-2020-14664US	medium5.1	4.25% (91st)	—	no fix	2020-07-15	—
CVE-2021-2341US	medium4.3	4.24% (91st)	—	no fix	2021-07-21	—
CVE-2020-2659US	low3.7	4.20% (91st)	—	no fix	2020-01-15	—
CVE-2020-2583US	low3.7	4.02% (91st)	—	no fix	2020-01-15	—
CVE-2021-2388US	medium5.1	4.01% (90th)	—	no fix	2021-07-21	—
CVE-2020-2654US	low3.7	3.96% (90th)	—	no fix	2020-01-15	—
CVE-2020-14583US	medium5.1	3.92% (90th)	—	no fix	2020-07-15	—
CVE-2020-14593US	medium4.3	3.85% (90th)	—	no fix	2020-07-15	—
CVE-2020-27840US	high7.5	3.83% (90th)	—	no fix	2021-05-12	—
CVE-2022-21283US	medium5.0	3.78% (90th)	—	no fix	2022-01-19	—
CVE-2021-2432US	medium4.3	3.70% (90th)	—	no fix	2021-07-21	—
CVE-2018-18066US	high7.5	3.59% (89th)	—	no fix	2018-10-08	—
CVE-2021-2369US	medium4.3	3.44% (89th)	—	no fix	2021-07-21	—
CVE-2020-14573US	medium4.3	3.40% (89th)	—	no fix	2020-07-15	—
CVE-2018-5744US	high7.5	3.38% (89th)	—	no fix	2019-10-09	—
CVE-2020-14577US	medium4.3	3.38% (89th)	—	no fix	2020-07-15	—
CVE-2019-2842US	low3.7	3.36% (89th)	—	no fix	2019-07-23	—
CVE-2020-2585US	medium5.9	3.32% (89th)	—	no fix	2020-01-15	—
CVE-2020-14581US	medium4.3	3.31% (88th)	—	no fix	2020-07-15	—
CVE-2015-8035US	low2.6	3.26% (88th)	—	no fix	2015-11-18	—
CVE-2022-21366US	medium5.0	3.22% (88th)	—	no fix	2022-01-19	—
CVE-2020-12662US	high7.5	3.20% (88th)	—	no fix	2020-05-19	—

showing 50 of 82

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation24 CVEs
CWE-284Improper Access Control14 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-311Missing Encryption of Sensitive Data5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-264CWE-2643 CVEs
CWE-476NULL Pointer Dereference3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)82 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan