CVEvulnerability

CVE-2007-1367

4.3 MEDIUM Published 2007-03-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

Affected configurations

• avaya s8710 cm 2.0 • avaya s8710 cm 3.1 • avaya s8710 r2.0.0 • avaya s8710 r2.0.1 • avaya s8300 cm 2.0 • avaya s8300 cm 3.1 • avaya s8300 r2.0.0 • avaya s8300 r2.0.1 • avaya s8500 cm 2.0 • avaya s8500 cm 3.1 • avaya s8500 r2.0.0 • avaya s8500 r2.0.1 • avaya s8700 cm 2.0 • avaya s8700 cm 3.1 • avaya s8700 r2.0.0 • avaya s8700 r2.0.1

References