Advisories · Technology

Avaya IP Office.

Every CVE that names Avaya IP Office among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4197 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Avaya IP Office One-X Portal File Upload Vulnerability
- Avaya IP Office
- Unrestricted file upload
Not analysed yet 25 Jun 2024
CVE-2024-4196 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Avaya IP Office Web Control RCE Vulnerability
- Avaya IP Office
- CWE-782
Not analysed yet 25 Jun 2024
CVE-2021-25657 CVE record

CVSS 7.8 High

Avaya IP Office Privilege Escalation Vulnerability
- Avaya IP Office
- Privilege escalation
Not analysed yet 2 Sept 2022
CVE-2019-7005 CVE record

CVSS 5.9 Medium

Unauthenticated Information Disclosure Vulnerability in IP Office
- Avaya IP Office
- Information disclosure
Not analysed yet 7 Aug 2020
CVE-2020-7030 CVE record

CVSS 5.5 Medium

IPO Information Disclosure
- Avaya IP Office
- Hard-coded credentials
Not analysed yet 3 Jun 2020
CVE-2018-15614 CVE record

CVSS 6.8 Medium

IP Office one-X Portal XSS
- Avaya IP Office
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2019
CVE-2018-15610 CVE record

CVSS 7.3 High

Improper access controls in IP Office one-X Portal
- Avaya IP Office
- Broken access control
Not analysed yet 12 Sept 2018