Read the docs

Alcatel-Lucent

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Alcatel-Lucent records in CISA KEV

No Alcatel-Lucent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Omniswitch Firmware · all components

Priority LOW 36

Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with f…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03027 Published 2015-06-16 No fix listed CWE-352
Priority LOW 24

The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remot…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02012 Published 2015-06-16 No fix listed CWE-200
Open these records in search →