CVE-2018-15610: falha de alta gravidade em Avaya IP Office
Improper access controls in IP Office one-X Portal
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 1.8%
A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Produtos afetados
Avaya · IP OfficeCVEs relacionadas — Avaya IP Office
No mesmo produto, das mais perigosas para as menos.
CVE-2019-7005MEDIUMUnauthenticated Information Disclosure Vulnerability in IP OfficeEPSS 1.2%CVE-2020-7030MEDIUMIPO Information DisclosureEPSS 1.0%CVE-2024-4197CRITICALAvaya IP Office One-X Portal File Upload VulnerabilityEPSS 0.8%CVE-2018-15614MEDIUMIP Office one-X Portal XSSEPSS 0.6%CVE-2024-4196CRITICALAvaya IP Office Web Control RCE VulnerabilityEPSS 0.6%CVE-2021-25657HIGHAvaya IP Office Privilege Escalation VulnerabilityEPSS 0.3%