Approved changes feed: RSS · Atom
cpe:2.3:a:avaya:ip_office:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d) |
|---|---|
| Product | Ip Office (9a7813a8-16d5-5d65-b40f-fafbbe22d2eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4197 |
vulnerable | 2026-06-08 06:50:17.200834 |
Avaya IP Office One-X Portal File Upload Vulnerability
CRITICAL (9.9)
An unrestricted file upload vulnerability in Avaya IP Office was discovered that could allow remote command or code execution via the One-X component. Affected versions include all versions prior to 11.1.3.1.
Published: 2024-06-25T04:01:17.685Z
Updated: 2024-08-01T20:33:52.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4196 |
vulnerable | 2026-06-08 06:50:17.199040 |
Avaya IP Office Web Control RCE Vulnerability
CRITICAL (10)
An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1.
Published: 2024-06-25T04:00:30.307Z
Updated: 2025-10-01T01:32:20.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25657 |
vulnerable | 2026-06-08 05:30:41.169613 |
Avaya IP Office Privilege Escalation Vulnerability
HIGH (7.8)
A privilege escalation vulnerability was discovered in Avaya IP Office Admin Lite and USB Creator that may potentially allow a local user to escalate privileges. This issue affects Admin Lite and USB Creator 11.1 Feature Pack 2 Service Pack 1 and earlier versions.
Published: 2022-09-02T01:05:08.862Z
Updated: 2024-09-17T01:46:04.516Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7030 |
vulnerable | 2026-06-08 05:27:11.753766 |
IPO Information Disclosure
MEDIUM (5.5)
A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.
Published: 2020-06-03T23:45:14.497Z
Updated: 2024-09-16T22:19:49.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7005 |
vulnerable | 2026-06-08 05:14:13.653686 |
Unauthenticated Information Disclosure Vulnerability in IP Office
MEDIUM (5.9)
A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2.
Published: 2020-08-07T21:20:12.164Z
Updated: 2024-09-16T18:18:48.538Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15614 |
vulnerable | 2026-06-08 05:10:55.167585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15610 |
vulnerable | 2026-06-08 05:10:55.143139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11309 |
vulnerable | 2026-06-08 05:08:37.152755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.