GCVE - cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

Vendor	Avaya (`79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d`)
Product	Communication Manager (`27d2a38b-ffba-5a92-81d5-35801d61dfdd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6711`	vulnerable	2026-06-08 04:51:04.648654	Details available Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs." Published: 2009-04-10T15:00:00.000Z Updated: 2024-08-07T11:41:59.631Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1944/references http://secunia.com/advisories/30799 http://www.voipshield.com/research-details.php?id=80 https://exchange.xforce.ibmcloud.com/vulnerabilities/43391 http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6710`	vulnerable	2026-06-08 04:51:04.644427	Details available Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials." Published: 2009-04-10T15:00:00.000Z Updated: 2024-08-07T11:42:00.463Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1944/references http://secunia.com/advisories/30799 http://www.voipshield.com/research-details.php?id=79 http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/43386	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6709`	vulnerable	2026-06-08 04:51:04.643900	Details available Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or restoring parameters." Published: 2009-04-10T15:00:00.000Z Updated: 2024-08-07T11:41:59.733Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1943/references http://secunia.com/advisories/30751 http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm http://www.osvdb.org/46603 http://www.voipshield.com/research-details.php?id=78	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6708`	vulnerable	2026-06-08 04:51:04.638631	Details available Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or restoring parameters." Published: 2009-04-10T15:00:00.000Z Updated: 2024-08-07T11:41:59.535Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1943/references http://secunia.com/advisories/30751 http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/43390 http://www.voipshield.com/research-details.php?id=77	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6707`	vulnerable	2026-06-08 04:51:04.638079	Details available The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an "unnecessary default application," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server configuration, and (6) "full system help." Published: 2009-04-10T15:00:00.000Z Updated: 2024-08-07T11:42:00.366Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1943/references http://secunia.com/advisories/30751 http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm http://www.voipshield.com/research-details.php?id=86 https://exchange.xforce.ibmcloud.com/vulnerabilities/43384	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6706`	vulnerable	2026-06-08 04:51:04.633444	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6575`	vulnerable	2026-06-08 04:50:55.453282	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6574`	vulnerable	2026-06-08 04:50:55.452371	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5710`	vulnerable	2026-06-08 04:50:52.571200	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.