Communication Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:avaya:communication_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d) |
|---|---|
| Product | Communication Manager (27d2a38b-ffba-5a92-81d5-35801d61dfdd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-15617 |
vulnerable | 2026-06-08 05:10:55.180554 |
Communication Manager Denial of Service
MEDIUM (6.5)
A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1.
Published: 2019-02-01T15:00:00.000Z
Updated: 2024-08-05T10:01:54.491Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15611 |
vulnerable | 2026-06-08 05:10:55.163361 |
Communication Manager Local Administrator PrivEsc
MEDIUM (6.3)
A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.
Published: 2018-09-27T23:00:00.000Z
Updated: 2024-09-16T23:01:41.772Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6573 |
vulnerable | 2026-06-08 04:50:55.451559 |
Details available
Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager (SPIM) in the web interface; and allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to (2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server.
Published: 2009-04-01T22:00:00.000Z
Updated: 2024-08-07T11:34:47.182Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2812 |
vulnerable | 2026-06-08 04:50:32.256433 |
Details available
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
Published: 2008-07-09T00:00:00.000Z
Updated: 2024-08-07T09:14:14.939Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1490 |
vulnerable | 2026-06-08 04:49:42.708443 |
Details available
Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell command injection").
Published: 2007-03-16T22:00:00.000Z
Updated: 2024-08-07T12:59:08.559Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.