Avaya Communication Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Avaya Communication Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2008-6710 — CVSS 9.0 (critical): Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before…
• CVE-2008-5709 — CVSS 9.0 (critical): Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before…
• CVE-2008-6709 — CVSS 9.0 (critical): Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya…
• CVE-2008-6708 — CVSS 9.0 (critical): Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya…
• CVE-2008-6711 — CVSS 9.0 (critical): Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before…
• CVE-2008-2812 — CVSS 7.8 (high): The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system…
• CVE-2008-6706 — CVSS 7.8 (high): Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya…
• CVE-2008-6574 — CVSS 7.5 (high): Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain…
• CVE-2008-3778 — CVSS 7.5 (high): The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager…
• CVE-2004-1082 — CVSS 7.5 (high): mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows…
• CVE-2008-6575 — CVSS 6.8 (medium): Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote…
• CVE-2008-6573 — CVSS 6.8 (medium): Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1)…
• CVE-2008-6707 — CVSS 6.4 (medium): The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not…
• CVE-2007-1490 — CVSS 6.0 (medium): Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to…
• CVE-2008-5710 — CVSS 5.0 (medium): Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote…
• CVE-2008-3777 — CVSS 2.1 (low): The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES…