CVE-2007-1367

4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 42.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Avaya S8300Avaya S8500Avaya S8700+1 more
Timeline
PublishedMar 9
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages4 packages

▶NVDavaya/s83004 versions+3
▶NVDavaya/s85004 versions+3
▶NVDavaya/s87004 versions+3
▶NVDavaya/s87104 versions+3

Patches

Patch: support.avaya.com ↗Patch: support.avaya.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cc8r-4fmq-cr6v: Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3↗2022-05-01
▶
CVEList
CVE-2007-1367: Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3↗2007-03-09
▶

💥Exploits & PoCs

1
Exploit-DB
Motorola Timbuktu Pro 8.6.3.1367 - Directory Traversal↗2007-08-27
▶