Avaya Aura Application Enablement Services 7.0.x

productDE

cpe:/a:avaya:aura_application_enablement_services:7.0.x

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical9high1medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-11745US	high8.8	2.99% (87th)	—	no fix	2020-01-08	—
CVE-2019-17012US	high8.8	1.97% (80th)	—	no fix	2020-01-08	—
CVE-2019-17005US	high8.8	1.91% (80th)	—	no fix	2020-01-08	—
CVE-2019-17008US	high8.8	1.88% (79th)	—	no fix	2020-01-08	—
CVE-2019-17011US	high7.5	1.52% (75th)	—	no fix	2020-01-08	—
CVE-2019-17010US	high7.5	1.52% (75th)	—	no fix	2020-01-08	—
CVE-2019-17014US	high7.4OT elevated	1.25% (69th)	—	no fix	2020-01-08	—
CVE-2019-17013US	high8.8	1.03% (63rd)	—	no fix	2020-01-08	—
CVE-2019-13722US	medium6.5	1.00% (63rd)	—	no fix	2020-01-14	—
CVE-2019-17009US	high7.8OT elevated	0.33% (26th)	—	no fix	2020-01-08	—

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write5 CVEs
CWE-416Use After Free4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-377Insecure Temporary File1 CVEs
CWE-829Inclusion of Functionality from Untrusted Control Sphere1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.