CVE-2007-1367

Published: Mar 9, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field.

Affected (16)

Products: Avaya: S8710, S8300, S8500, S8700

4 products

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Avaya S8710	Version cm_2.0
Avaya S8710	Version cm_3.1
Avaya S8710	Version r2.0.0
Avaya S8710	Version r2.0.1
Avaya S8300	Version cm_2.0
Avaya S8300	Version cm_3.1
Avaya S8300	Version r2.0.0
Avaya S8300	Version r2.0.1
Avaya S8500	Version cm_2.0
Avaya S8500	Version cm_3.1
Avaya S8500	Version r2.0.0
Avaya S8500	Version r2.0.1
Avaya S8700	Version cm_2.0
Avaya S8700	Version cm_3.1
Avaya S8700	Version r2.0.0
Avaya S8700	Version r2.0.1