Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Priority MEDIUM 44

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary command…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02445 Published 2009-04-10 No fix listed
Priority MEDIUM 43

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain roo…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02098 Published 2009-04-10 No fix listed
Priority LOW 31

The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01498 Published 2009-04-10 No fix listed CWE-287
Priority LOW 38

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application se…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02261 Published 2009-04-10 No fix listed
Priority LOW 26

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01442 Published 2008-12-24 No fix listed CWE-16
Priority MEDIUM 45

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbi…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03349 Published 2008-12-24 No fix listed CWE-20
Priority LOW 11

The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs du…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00297 Published 2008-08-25 No fix listed CWE-200
Priority LOW 30

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01518 Published 2007-03-16 No fix listed