CVE-2019-7007

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...

Directory traversal

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...

CVE-2019-7007 Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability

A directory traversal vulnerability has been found in the Avaya Equinox ManagementiViewversions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server...

CVE-2019-7007

CVE-2019-7007 is a directory traversal vulnerability in Avaya Equinox Management (iView) versions R9.1.9.0 and earlier. The context from connected documents confirms a path traversal issue that could allow an unauthenticated attacker to access files outside the restricted directory on the remote ...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting

Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link: https://www.avaya.com/en/products/unified-communications/voip/...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link:...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Softwa...

Avaya IP Office Application Server 11.0.0.0 Cross Site Scripting

Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link: https://www.avaya.com/en/products/unified-communications/voip/...

Avaya Aura Communication Manager 5.2 - Remote Code Execution

Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory:...

Avaya Aura Communication Manager 5.2 Remote Code Execution

Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory: https://downloads.avaya.com/css/P8/documents/100183151 Exploit generates a reverse shel...

Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory:...

Avaya Aura Communication Manager 5.2 - Remote Code Execution

Exploit Title: Avaya Aura Communication Manager 5.2 - Remote Code Execution Exploit Author: Sarang Tumne a.k.a SarT Date: 2020-02-14 Confirmed on release 5.2 Vendor: https://www.avaya.com/en/ Avaya's advisory: https://downloads.avaya.com/css/P8/documents/100183151 Exploit generates a reverse shel...

Avaya IP Office Application Server WebUI Component Cross-Site Scripting Vulnerability

Avaya IP Office Application Server is an application server from the American company Avaya. A cross-site scripting vulnerability exists in the WebUI component of IP Office Application Server version 11.x. The vulnerability stems from a lack of proper validation of client-side data in the WEB...

CVE-2019-7004 Avaya IP Office XSS Vulnerability

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

login.avaya.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1019056 Security Researcher ashketchum Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting login.avaya.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the...

How a 10-Year-Old Desk Phone Bug Came Back From the Dead

Avaya patched a problem hackers could exploit in phones. But the bad code never went away...

Critical RCE Bug Found Lurking in Avaya VoIP Phones

A decade-old remote code-execution RCE bug has been found, unpatched, in an Avaya desk phone that’s used at 90 percent of Fortune 100 companies. If exploited, attackers could remotely take over the operation of the phone, exfiltrate audio and potentially even “bug” the phone to listen in...

Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware

ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...

Avaya Deskphone: Decade-Old Vulnerability Found in Phone's Firmware

ARCHIVED STORY Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware By Philippe Laulheret · August 08, 2019 Avaya is the second largest VOIP solution provider source with an install base covering 90% of the Fortune 100 companies source, with products targeting a wide spectrum of...

Avaya Aura Conferencing Cross-Site Scripting Vulnerability

Avaya Aura Conferencing is a next-generation on-premise collaboration solution from Avaya, Inc. The product is capable of delivering audio, HD video, and Web collaboration.A cross-site scripting vulnerability exists in Avaya Aura Conferencing 8.0 SP14 8.0.14 prior to version 8.x. The vulnerabilit...