Vulnerability in Avaya S8300

CVE-2007-1367

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

Affected products

Avaya S8300 — versions cm_2.0, cm_3.1, r2.0.0
Avaya S8500 — versions cm_2.0, cm_3.1, r2.0.0
Avaya S8700 — versions cm_2.0, cm_3.1, r2.0.0
Avaya S8710 — versions cm_2.0, cm_3.1, r2.0.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)