Avaya Communication Manager 2.0

CPE Details

Avaya Communication Manager 2.0
avaya
communication_manager
2.0
2007-08-23
19h16 +00:00
2007-09-14
15h36 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:avaya:communication_manager:2.0:*:*:*:*:*:*:*

Informations

Vendor

avaya

Product

communication_manager

Version

2.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2008-6573 2009-04-01 20h00 +00:00 Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager (SPIM) in the web interface; and allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to (2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server.
6.8
CVE-2007-1490 2007-03-16 21h00 +00:00 Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell command injection").
6
CVE-2004-1082 2005-04-21 02h00 +00:00 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
7.5