Lucene search
+L

139 matches found

Cvelist
Cvelist
added 2024/06/25 4:01 a.m.49 views

CVE-2024-4197 Avaya IP Office One-X Portal File Upload Vulnerability

An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1...

9.9CVSS0.00777EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/25 4:00 a.m.51 views

CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

10CVSS0.00587EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/25 4:00 a.m.82 views

CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

10CVSS7.5AI score0.00587EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/25 4:00 a.m.119 views

CVE-2024-4196

CVE-2024-4196 – Avaya IP Office Web Control RPC/RCE issue. The vulnerability stems from improper input validation in the Web Control component of Avaya IP Office, enabling remote code execution via a crafted web request. Affected products: Avaya IP Office (Web Control) prior to version 11.1.3.1. ...

10CVSS9.7AI score0.00587EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/25 12:00 a.m.10 views

Avaya IP Office Security Breach

Avaya IP Office is a small business phone system from Avaya USA. A security vulnerability exists in Avaya IP Office versions prior to 11.1.3.1, which originated from a vulnerability that allows remote commands or code to be executed via a specially crafted web request to the web control component...

10CVSS7.2AI score0.00587EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/25 12:00 a.m.8 views

Avaya IP Office Security Breach

Avaya IP Office is a small business phone system from Avaya USA. A security vulnerability exists in Avaya IP Office versions prior to 11.1.3.1 that originates from allowing remote command or code execution via the One-X component...

9.9CVSS7.7AI score0.00777EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/25 12:00 a.m.11 views

PT-2024-29663

Name of the Vulnerable Software and Affected Versions Avaya IP Office versions prior to 11.1.3.1 Description An improper input validation issue was discovered in Avaya IP Office, allowing remote command or code execution via a specially crafted web request to the Web Control component...

10CVSS7.7AI score0.00587EPSS
SaveExploits0References7
NVD
NVD
added 2022/09/02 1:15 a.m.33 views

CVE-2021-25657

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

7.8CVSS0.00248EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/02 1:15 a.m.10 views

CVE-2021-25657

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

7.8CVSS5.8AI score0.00248EPSS
SaveExploits1References2
Prion
Prion
added 2022/09/02 1:15 a.m.38 views

Privilege escalation

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

4.3CVSS7.8AI score0.00248EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/02 1:05 a.m.41 views

CVE-2021-25657 Avaya IP Office Privilege Escalation Vulnerability

A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions...

7.8CVSS8.1AI score0.00248EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/02 1:05 a.m.90 views

CVE-2021-25657

CVE-2021-25657 describes a local privilege-escalation vulnerability in Avaya IP Office Admin Lite and USB Creator, affecting version 11.1 Feature Pack 2 Service Pack 1 and earlier. The documented impact is that a local user may escalate privileges. The CVSS metrics in the sources flag high impact...

7.8CVSS7.9AI score0.00248EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/02 12:00 a.m.12 views

PT-2022-9680 · Avaya · Avaya Ip Office Usb Creator +1

Name of the Vulnerable Software and Affected Versions: Avaya IP Office Admin Lite and USB Creator versions 11.1 Feature Pack 2 Service Pack 1 and earlier Description: A privilege escalation issue was discovered that may allow a local user to escalate privileges. Recommendations: For Avaya IP Offi...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/09/02 12:00 a.m.10 views

Avaya IP Office 安全漏洞

Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. A security vulnerability exists in Avaya IP Office 11.1 FP2 SP1 and prior versions, which stems from Admin Lite and USB Creator allowing local users to elevate privileges...

7.8CVSS7.3AI score0.00248EPSS
SaveExploits1References3
NCSC
NCSC
added 2020/08/10 12:00 a.m.9 views

Vulnerability fixed in Avaya IP Office Manager

A vulnerability has been fixed in Avaya IP Office Manager. The vulnerability allows an unauthenticated malicious person with access to the network to obtain sensitive data. Avaya has released updates to fix the vulnerability. More information can be found on the page below:...

7.5CVSS6.5AI score0.01195EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/08/10 12:00 a.m.19 views

Avaya IP Office 10.x < 10.1.0.8, 11.0 < 11.0.4.3 Information Disclosure Vulnerability

Avaya IP Office is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.5AI score0.01195EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/07 10:15 p.m.24 views

CVE-2019-7005

A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2...

7.5CVSS6.5AI score0.01195EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/07 10:15 p.m.9 views

CVE-2019-7005

A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2...

7.5CVSS6.5AI score0.01195EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/07 10:15 p.m.20 views

Design/Logic Flaw

A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2...

5CVSS5.9AI score0.01195EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/07 9:20 p.m.24 views

CVE-2019-7005 Unauthenticated Information Disclosure Vulnerability in IP Office

A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2...

5.9CVSS7.7AI score0.01195EPSS
SaveExploits0References1
Rows per page
Query Builder