Avaya IP Office 8.1

CPE Details

Avaya IP Office 8.1
avaya
ip_office
8.1
2019-11-20
18h16 +00:00
2021-03-26
14h57 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:avaya:ip_office:8.1:*:*:*:*:*:*:*

Informations

Vendor

avaya

Product

ip_office

Version

8.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-4197 2024-06-25 04h01 +00:00 An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.
9.9
Critical
CVE-2024-4196 2024-06-25 04h00 +00:00 An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.
10
Critical
CVE-2021-25657 2022-09-02 01h05 +00:00 A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions.
7.8
High
CVE-2016-5285 2019-11-15 14h44 +00:00 A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
7.5
High
CVE-2017-11309 2017-11-09 18h00 +00:00 Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response.
9.6
Critical