Avaya Communication Manager 3.1.4
Approved changes feed: RSS · Atom
cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
part: a version: 3.1.4 update: *
| Vendor | Avaya (79b6be94-fcaf-5aa3-ae43-dbb8cc49f79d) |
|---|---|
| Product | Communication Manager (27d2a38b-ffba-5a92-81d5-35801d61dfdd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6711 |
vulnerable | 2026-06-08 04:51:04.648730 |
Details available
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."
Published: 2009-04-10T15:00:00.000Z
Updated: 2024-08-07T11:41:59.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6709 |
vulnerable | 2026-06-08 04:51:04.643971 |
Details available
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or restoring parameters."
Published: 2009-04-10T15:00:00.000Z
Updated: 2024-08-07T11:41:59.733Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6708 |
vulnerable | 2026-06-08 04:51:04.638704 |
Details available
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or restoring parameters."
Published: 2009-04-10T15:00:00.000Z
Updated: 2024-08-07T11:41:59.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6707 |
vulnerable | 2026-06-08 04:51:04.638150 |
Details available
The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an "unnecessary default application," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server configuration, and (6) "full system help."
Published: 2009-04-10T15:00:00.000Z
Updated: 2024-08-07T11:42:00.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6706 |
vulnerable | 2026-06-08 04:51:04.635438 |
Details available
Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords."
Published: 2009-04-10T15:00:00.000Z
Updated: 2024-08-07T11:41:59.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6575 |
vulnerable | 2026-06-08 04:50:55.453357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6574 |
vulnerable | 2026-06-08 04:50:55.452449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6573 |
vulnerable | 2026-06-08 04:50:55.451679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5710 |
vulnerable | 2026-06-08 04:50:52.572317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.