Priority MEDIUM 52
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01336 · Published 2023-06-12 · No fix listed CWE-94
Priority MEDIUM 47
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "B…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01861 · Published 2023-12-05 · Fixed in V10 R3.4.0, V10 R10.12.00 +1 CWE-88
Priority MEDIUM 47
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthentic…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01848 · Published 2022-12-13 · No fix listed CWE-77
Priority MEDIUM 47
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02574 · Published 2020-01-09 · No fix listed CWE-78
Priority MEDIUM 45
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve admini…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00899 · Published 2023-04-06 · No fix listed CWE-77
Priority MEDIUM 45
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.017 · Published 2020-01-09 · No fix listed CWE-287
Priority MEDIUM 44
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve admini…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00838 · Published 2023-04-06 · No fix listed CWE-77
Priority MEDIUM 44
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve admin…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00838 · Published 2023-04-06 · No fix listed CWE-77
Priority MEDIUM 44
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2022-07-25 · No fix listed
Priority MEDIUM 43
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, lead…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01494 · Published 2023-10-09 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system,…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01494 · Published 2023-10-09 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01494 · Published 2023-10-09 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka O…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01504 · Published 2023-06-12 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka O…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01504 · Published 2023-06-12 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01504 · Published 2023-06-12 · No fix listed CWE-77
Priority MEDIUM 43
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka O…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01504 · Published 2023-06-12 · No fix listed CWE-77
Priority MEDIUM 42
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web inte…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01095 · Published 2023-10-09 · No fix listed
Priority MEDIUM 42
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path tra…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00895 · Published 2023-10-09 · No fix listed CWE-22
Priority MEDIUM 41
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interf…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00782 · Published 2023-10-09 · No fix listed CWE-434
Priority MEDIUM 41
Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00687 · Published 2023-10-09 · No fix listed
Priority LOW 37
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01919 · Published 2020-02-21 · No fix listed CWE-639
Priority LOW 35
In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2024-03-22 · No fix listed CWE-269
Priority LOW 35
Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00956 · Published 2023-04-13 · No fix listed CWE-94
Priority LOW 34
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00565 · Published 2023-10-09 · No fix listed
Priority LOW 28
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00648 · Published 2020-02-21 · No fix listed CWE-79