Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Al-enterprise Clear all filters
TI-2019-10619 CVE-2019-14260 · GHSA-gjmc-3r96-j3c6

On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with…

Priority MEDIUM 40

On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection (missing input validation) issue in the password change field for the Change Password interface al…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02803 Published 2019-08-01 No fix listed CWE-78
TI-2007-02914 CVE-2007-3010 · GHSA-27fx-q398-q8vr

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication…

Priority CRITICAL 100KEV

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97385 Published 2007-09-18 No fix listed CWE-77